SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityAnalyzed

CVE-2025-43437

An information disclosure issue was addressed with improved privacy controls.

LOW 3.3EPSS 0.14%

Does this matter?

Lower severity and a low EPSS score (0.14%). Track it; it rarely justifies an emergency change on its own.

Description

An information disclosure issue was addressed with improved privacy controls. This issue is fixed in iOS 26.1 and iPadOS 26.1. An app may be able to fingerprint the user.

CVSS 3.1
3.3 LOWCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS
0.14% probability · 3th percentile
CISA KEV
Not listed
Weakness
CWE-200
Affected
apple/ipados · apple/iphone os
Source
product-security@apple.com

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.