CVE-2025-43437

An information disclosure issue was addressed with improved privacy controls. This issue is fixed in iOS 26.1 and iPadOS 26.1. An app may be able to fingerprint the user.
References
Link Resource
https://support.apple.com/en-us/125632 Release Notes Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

History

16 Dec 2025, 21:33

Type Values Removed Values Added
First Time Apple ipados
Apple
Apple iphone Os
References () https://support.apple.com/en-us/125632 - () https://support.apple.com/en-us/125632 - Release Notes, Vendor Advisory
CPE cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

15 Dec 2025, 01:15

Type Values Removed Values Added
CWE CWE-200
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 3.3

12 Dec 2025, 21:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-12-12 21:15

Updated : 2025-12-16 21:33


NVD link : CVE-2025-43437

Mitre link : CVE-2025-43437

CVE.ORG link : CVE-2025-43437


JSON object : View

Products Affected

apple

  • iphone_os
  • ipados
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor