Dashboard / CVE-2025-43520

CVE-2025-43520

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 0/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain a classic buffer overflow vulnerability which could allow a malicious application to cause unexpected system termination or write kernel memory.

CISA Known Exploited Vulnerability

Vendor / Product Apple — Multiple Products
Date Added 2026-03-20
Remediation Due 2026-04-03
https://support.apple.com/en-us/125632 ; https://support.apple.com/en-us/125633 ; https://support.apple.com/en-us/125634 ; https://support.apple.com/en-us/125635 ; https://support.apple.com/en-us/125636 ; https://support.apple.com/en-us/125637 ; https://support.apple.com/en-us/125638 ; https://support.apple.com/en-us/125639 ; https://nvd.nist.gov/vuln/detail/CVE-2025-43520

Weakness Classification (1)

Affected Software (10)

VendorProductVersion
apple ipados < 18.7.2
apple ipados 26.0
apple iphone_os < 18.7.2
apple iphone_os 26.0
apple macos 14.0 – 14.8.2
apple macos 15.0 – 15.7.2
apple macos 26.0
apple tvos < 26.1
apple visionos < 26.1
apple watchos < 26.1

References & Advisories (10)

https://support.apple.com/en-us/125632
Release Notes Vendor Advisory
https://support.apple.com/en-us/125633
Release Notes Vendor Advisory
https://support.apple.com/en-us/125634
Release Notes Vendor Advisory
https://support.apple.com/en-us/125635
Release Notes Vendor Advisory
https://support.apple.com/en-us/125636
Release Notes Vendor Advisory
https://support.apple.com/en-us/125637
Release Notes Vendor Advisory
https://support.apple.com/en-us/125638
Release Notes Vendor Advisory
https://support.apple.com/en-us/125639
Release Notes Vendor Advisory

Bug Bounty Relevance

0 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

0.43%
Raw Score 0.004250
Percentile 36.7%
Date 2026-10-28

Intelligence Sources

kev ref →

External Links