CVE-2025-43200

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-43200
This issue was addressed with improved checks. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.1 and iPadOS 18.3.1, iPadOS 17.7.5, macOS Sequoia 15.3.1, macOS Sonoma 14.7.4, macOS Ventura 13.7.4, visionOS 2.3.1, watchOS 11.3.1. A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.

4.2 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.6 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://support.apple.com/en-us/122173 Vendor Advisory
https://support.apple.com/en-us/122174 Vendor Advisory
https://support.apple.com/en-us/122345 Vendor Advisory
https://support.apple.com/en-us/122346 Vendor Advisory
https://support.apple.com/en-us/122900 Vendor Advisory
https://support.apple.com/en-us/122901 Vendor Advisory
https://support.apple.com/en-us/122902 Vendor Advisory
https://support.apple.com/en-us/122903 Vendor Advisory
https://support.apple.com/en-us/122904 Vendor Advisory
https://citizenlab.ca/2025/06/first-forensic-confirmation-of-paragons-ios-mercenary-spyware-finds-journalists-targeted/ Press/Media Coverage
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-43200 US Government Resource
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
History

02 Apr 2026, 19:20

Type Values Removed Values Added
Summary (en) This issue was addressed with improved checks. This issue is fixed in watchOS 11.3.1, macOS Ventura 13.7.4, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iPadOS 17.7.5, visionOS 2.3.1, macOS Sequoia 15.3.1, iOS 18.3.1 and iPadOS 18.3.1, macOS Sonoma 14.7.4. A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals. (en) This issue was addressed with improved checks. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.1 and iPadOS 18.3.1, iPadOS 17.7.5, macOS Sequoia 15.3.1, macOS Sonoma 14.7.4, macOS Ventura 13.7.4, visionOS 2.3.1, watchOS 11.3.1. A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.

29 Oct 2025, 14:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 4.8 		v2 : unknown
v3 : 4.2

23 Oct 2025, 18:04

Type Values Removed Values Added
References () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-43200 - () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-43200 - US Government Resource

21 Oct 2025, 23:17

Type Values Removed Values Added
References
  • () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-43200 -

21 Oct 2025, 20:20

Type Values Removed Values Added
References
  • {'url': 'https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-43200', 'source': '134c704f-9b21-4f2e-91b3-4a467353bcc0'}

21 Oct 2025, 19:21

Type Values Removed Values Added
References
  • () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-43200 -

17 Jun 2025, 15:52

Type Values Removed Values Added
First Time Apple visionos
Apple ipados
Apple iphone Os
Apple watchos
Apple
Apple macos
CPE cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
References () https://support.apple.com/en-us/122173 - () https://support.apple.com/en-us/122173 - Vendor Advisory
References () https://support.apple.com/en-us/122174 - () https://support.apple.com/en-us/122174 - Vendor Advisory
References () https://support.apple.com/en-us/122345 - () https://support.apple.com/en-us/122345 - Vendor Advisory
References () https://support.apple.com/en-us/122346 - () https://support.apple.com/en-us/122346 - Vendor Advisory
References () https://support.apple.com/en-us/122900 - () https://support.apple.com/en-us/122900 - Vendor Advisory
References () https://support.apple.com/en-us/122901 - () https://support.apple.com/en-us/122901 - Vendor Advisory
References () https://support.apple.com/en-us/122902 - () https://support.apple.com/en-us/122902 - Vendor Advisory
References () https://support.apple.com/en-us/122903 - () https://support.apple.com/en-us/122903 - Vendor Advisory
References () https://support.apple.com/en-us/122904 - () https://support.apple.com/en-us/122904 - Vendor Advisory
References () https://citizenlab.ca/2025/06/first-forensic-confirmation-of-paragons-ios-mercenary-spyware-finds-journalists-targeted/ - () https://citizenlab.ca/2025/06/first-forensic-confirmation-of-paragons-ios-mercenary-spyware-finds-journalists-targeted/ - Press/Media Coverage
CWE NVD-CWE-noinfo

17 Jun 2025, 14:15

Type Values Removed Values Added
Summary
  • (es) Este problema se solucionó mejorando las comprobaciones. Este problema se solucionó en watchOS 11.3.1, macOS Ventura 13.7.4, iOS 15.8.4 y iPadOS 15.8.4, iOS 16.7.11 y iPadOS 16.7.11, iPadOS 17.7.5, visionOS 2.3.1, macOS Sequoia 15.3.1, iOS 18.3.1 y iPadOS 18.3.1, y macOS Sonoma 14.7.4. Existía un problema lógico al procesar una foto o un vídeo creado con fines maliciosos compartidos a través de un enlace de iCloud. Apple tiene conocimiento de un informe que indica que este problema podría haber sido explotado en un ataque extremadamente sofisticado contra personas específicas.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.8
References
  • () https://citizenlab.ca/2025/06/first-forensic-confirmation-of-paragons-ios-mercenary-spyware-finds-journalists-targeted/ -

16 Jun 2025, 22:16

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-16 22:16

Updated : 2026-04-03 14:29

NVD link : CVE-2025-43200

Mitre link : CVE-2025-43200

CVE.ORG link : CVE-2025-43200

JSON object : View

Products Affected

apple

  • watchos
  • iphone_os
  • visionos
  • ipados
  • macos
CWE
NVD-CWE-noinfo