VulnerabilityModified

CVE-2025-43365

A denial-of-service issue was addressed with improved input validation.

LOW 2.8EPSS 0.12%

Does this matter?

Lower severity and a low EPSS score (0.12%). Track it; it rarely justifies an emergency change on its own.

Description

A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26 and iPadOS 26. An unprivileged process may be able to terminate a root processes.

CVSS 3.1: 2.8 LOWCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
EPSS: 0.12% probability · 2th percentile
CISA KEV: Not listed
Weakness: CWE-20
Affected: apple/ipados · apple/iphone os
Source: product-security@apple.com

References

https://support.apple.com/en-us/125108
https://support.apple.com/en-us/125633

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.