by Kastro
Paper/Archive/CVE-2025-43362

CVE-2025-43362

Apple iOS and iPadOS — The issue was addressed with improved checks.

EPSS 1%CVSS 9.8
critical.is priorityof 100
43
CVSS 9.8 (ADP)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 66.6.666 × 2013.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The issue was addressed with improved checks. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26. An app may be able to monitor keystrokes without user permission.

Affected

ProductAffectedFixed inSource
iOS and iPadOS< 18.718.7CNA
iOS and iPadOS< 2626CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsupport.apple.com/en-us/125108refsupport.apple.com/en-us/125109refseclists.org/fulldisclosure/2025/Sep/50refseclists.org/fulldisclosure/2025/Sep/49