CVE-2025-43510KEV · OVERDUECWE-667

Apple Multiple Products Improper Locking Vulnerability

High · published December 13, 2025

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 28.0th percentile for exploit probability.

204
days past CISA
deadline
CVSS v3.1
7.8
EPSS
0%
Percentile
28.0
In the wild
Confirmed
What it is

⚡ A crafty app could wreak havoc on your device’s memory! This memory corruption issue allows unexpected changes in shared memory between processes, like an uninvited guest rearranging your living room furniture. 🚨 Think of it as a restaurant where one customer starts swapping ingredients from other diners' plates — it can create a chaotic culinary disaster! In this case, a malicious application could cause data mishaps and unexpected behavior by tampering with memory. If exploited, this vulnerability could lead to significant instability and unpredictable behavior of your applications, potentially exposing sensitive information or causing crashes. Imagine your app suddenly serving up the wrong data, or worse, crashing right in the middle of your important tasks!

Put simply

Think of it as a restaurant where one customer starts swapping ingredients from other diners' plates — it can create a chaotic culinary disaster! In this case, a malicious application could cause data mishaps and unexpected behavior by tampering with memory. This vulnerability involves memory corruption due to inadequate lock state checks, allowing malicious applications to alter shared memory between processes, leading to erratic behavior of affected applications.

What to do

If exploited, this vulnerability could lead to significant instability and unpredictable behavior of your applications, potentially exposing sensitive information or causing crashes. Imagine your app suddenly serving up the wrong data, or worse, crashing right in the middle of your important tasks! Update to the latest software versions: iOS 18.7.2, iPadOS 18.7.2, macOS Sequoia 15.7.2, and others listed in the CVE. It's crucial to patch your devices as soon as possible to prevent any malicious exploitation. You've got this! Stay proactive and your device will be more secure than ever! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00355 · 28.0th percentile
Weakness
CWE-667 · Improper Locking
Published
2025-12-13T02:15Z
KEV added
2026-03-20 · due 2026-04-03
Affected products (10)
ProductVersionsFixed in
apple/ipados< 18.7.218.7.2
apple/ipadosall versions—
apple/iphone_os< 18.7.218.7.2
apple/iphone_osall versions—
apple/macos≥ 14.0, < 14.8.214.8.2
apple/macos≥ 15.0, < 15.7.215.7.2
apple/macosall versions—
apple/tvos< 26.126.1
apple/visionos< 26.126.1
apple/watchos< 26.126.1
References (10)
EPSS history
Timeline
  • 20 MAR 00:00Z
    Added to CISA KEV — remediate by Apr 3
    kev
  • 12 DEC 20:56Z
    A memory corruption issue was addressed with improved lock state checking
    cvelistv5