CVE-2025-43230mediumCWE-863

CVE-2025-43230

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 4epss 0.2%

probabilidad de explotación

0.2%top 89% de las CVE

explotación observada

noninguna fuente lo reporta

The issue was addressed with additional permissions checks. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. An app may be able to access user-sensitive data.

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Productos afectados

Apple · iOS and iPadOS Apple · iPadOS Apple · macOS Apple · tvOS Apple · visionOS Apple · watchOS

Referencias

http://seclists.org/fulldisclosure/2025/Jul/30 http://seclists.org/fulldisclosure/2025/Jul/31 http://seclists.org/fulldisclosure/2025/Jul/32 http://seclists.org/fulldisclosure/2025/Jul/35 http://seclists.org/fulldisclosure/2025/Jul/37 https://support.apple.com/en-us/124147 https://support.apple.com/en-us/124148 https://support.apple.com/en-us/124149 https://support.apple.com/en-us/124153 https://support.apple.com/en-us/124154 https://support.apple.com/en-us/124155