CVE-2025-43507_CVE-2025-43507

6.5 / 10

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Description

A privacy issue was addressed by moving sensitive data. This issue is fixed in watchOS 26.1, iOS 26.1 and iPadOS 26.1, visionOS 26.1. An app may be able to fingerprint the user.

Basic Information

ID CVE-2025-43507

Source apple

Published Nov 4, 2025 at 01:16

Modified Nov 4, 2025 at 16:23

Affected Product

Vendor Apple

Product visionOS

Version unspecified

Affected Versions Apple visionOS unspecified
Apple watchOS unspecified
Apple iOS and iPadOS unspecified

CWE Classification

CWE-276

References

{
    "lastseen": "",
    "description": "A privacy issue was addressed by moving sensitive data. This issue is fixed in watchOS 26.1, iOS 26.1 and iPadOS 26.1, visionOS 26.1. An app may be able to fingerprint the user.",
    "published": "2025-11-04T01:16:03.906Z",
    "modified": "2025-11-04T16:23:53.215Z",
    "type": "cve",
    "title": "CVE-2025-43507",
    "source": "apple",
    "references": "https://support.apple.com/en-us/125638\nhttps://support.apple.com/en-us/125639\nhttps://support.apple.com/en-us/125632",
    "id": "CVE-2025-43507",
    "bulletinFamily": "",
    "cwe": [
        "CWE-276"
    ],
    "cvelist": null,
    "sourceData": "Apple visionOS unspecified\nApple watchOS unspecified\nApple iOS and iPadOS unspecified",
    "sourceHref": "",
    "cvss": {
        "score": 6.5,
        "severity": "MEDIUM",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "visionOS",
    "version": "unspecified",
    "vendor": "Apple",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}