CVE-2025-43500CWE-359

CVE-2025-43500

High · published November 4, 2025

CVSS v3.1
7.5
EPSS
1%
Percentile
43.6
In the wild
Unconfirmed
What it is

⚡ There's a sneaky privacy issue in iOS and macOS that could let apps peek behind the curtain at your sensitive user data! 🔍 Think of it like a hotel room with a poorly designed lock — even if you close the door, a crafty staff member might still get a peek inside without your permission. If left unaddressed, this vulnerability could allow apps to access personal information you thought was safe, like contact details or browsing history. It's a high-stakes game where your privacy hangs in the balance, and no one wants to play the part of the unsuspecting guest!

Put simply

Think of it like a hotel room with a poorly designed lock — even if you close the door, a crafty staff member might still get a peek inside without your permission. This issue involves improper handling of user preferences, allowing apps unauthorized access to sensitive user data. This could lead to unintended data exposure without user consent.

What to do

If left unaddressed, this vulnerability could allow apps to access personal information you thought was safe, like contact details or browsing history. It's a high-stakes game where your privacy hangs in the balance, and no one wants to play the part of the unsuspecting guest! Update your devices to iOS 26.1, iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, and watchOS 26.1 immediately to close this privacy gap. Remember to audit your app permissions and ensure they align with what you want to share! You've got this! Follow these steps and keep your data private and secure! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00524 · 43.6th percentile
Weakness
CWE-359 · Exposure of Private Personal Information to an Unauthorized Actor
Published
2025-11-04T07:15Z
Affected products (4)
ProductVersionsFixed in
apple/ipados< 26.126.1
apple/iphone_os< 26.126.1
apple/visionos< 26.126.1
apple/watchos< 26.126.1
References (4)
EPSS history
Timeline
  • 04 NOV 01:15Z
    A privacy issue was addressed with improved handling of user preferences
    cvelistv5