CVE-2025-43439

MediumCVSS 5.5

Published: 04/11/2025(UTC)Updated: 26/09/2026(UTC)Translated: 26/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

7th percentile - higher than 7% of all known CVEs

Summary

A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, visionOS 26.1. An app may be able to fingerprint the user.

Risk Assessment

An app may identify and track the user based on unique device characteristics, violating their privacy.

Recommendation

Update Apple devices to iOS 18.7.2/iPadOS 18.7.2, iOS 26.1/iPadOS 26.1, or visionOS 26.1.

Other vulnerabilities in iOS, iPadOS, visionOS

CVE-2026-28964High
An inconsistent user interface issue was addressed with improved state management. An app may be able to access sensitive user data.

Original NVD description (English source)

A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, visionOS 26.1. An app may be able to fingerprint the user.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS