CVE-2025-43542

This issue was addressed with improved state management. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, macOS Tahoe 26.2, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, visionOS 26.2. Password fields may be unintentionally revealed when remotely controlling a device over FaceTime.
Configurations

Configuration 1 (hide)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

History

17 Dec 2025, 21:16

Type Values Removed Values Added
References
  • () https://support.apple.com/en-us/125884 -
  • () https://support.apple.com/en-us/125885 -
  • () https://support.apple.com/en-us/125886 -
  • () https://support.apple.com/en-us/125891 -
Summary (en) This issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.3. Password fields may be unintentionally revealed when remotely controlling a device over FaceTime. (en) This issue was addressed with improved state management. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, macOS Tahoe 26.2, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, visionOS 26.2. Password fields may be unintentionally revealed when remotely controlling a device over FaceTime.

16 Dec 2025, 18:38

Type Values Removed Values Added
First Time Apple macos
Apple
References () https://support.apple.com/en-us/125887 - () https://support.apple.com/en-us/125887 - Release Notes, Vendor Advisory
CPE cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo

16 Dec 2025, 15:15

Type Values Removed Values Added
CWE CWE-200
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5

12 Dec 2025, 21:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-12-12 21:15

Updated : 2025-12-17 21:16


NVD link : CVE-2025-43542

Mitre link : CVE-2025-43542

CVE.ORG link : CVE-2025-43542


JSON object : View

Products Affected

apple

  • macos
CWE
NVD-CWE-noinfo CWE-200

Exposure of Sensitive Information to an Unauthorized Actor