CVE-2025-43323

{
  "id": "CVE-2025-43323",
  "sourceIdentifier": "[email protected]",
  "published": "2025-11-04T02:15:39.347",
  "lastModified": "2026-10-18T21:10:00.120",
  "vulnStatus": "Modified",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to fingerprint the user."
    },
    {
      "lang": "es",
      "value": "Este problema se abordó con comprobaciones de derechos adicionales. Este problema está solucionado en visionOS 26, tvOS 26, iOS 26 y iPadOS 26, watchOS 26. Una aplicación podría perfilar al usuario."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Apple",
          "product": "iOS and iPadOS",
          "versions": [
            {
              "version": "0",
              "lessThan": "26",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Apple",
          "product": "macOS",
          "versions": [
            {
              "version": "0",
              "lessThan": "26",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Apple",
          "product": "tvOS",
          "versions": [
            {
              "version": "0",
              "lessThan": "26",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Apple",
          "product": "visionOS",
          "versions": [
            {
              "version": "0",
              "lessThan": "26",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Apple",
          "product": "watchOS",
          "versions": [
            {
              "version": "0",
              "lessThan": "26",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
          "baseScore": 8.1,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.2
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2025-11-04T15:20:00.849055Z",
          "id": "CVE-2025-43323",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "26.0",
              "matchCriteriaId": "C4221CFD-0208-42B8-AACA-1BE6AEC3BA9A"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "26.0",
              "matchCriteriaId": "68DCA17A-424E-4EE3-B005-0F2E42407226"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "26.0",
              "matchCriteriaId": "BD4D5965-C1B7-4C82-AB16-BA4D41F2FBCA"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "26.0",
              "matchCriteriaId": "E33744A8-68C0-4822-B08E-100911C18404"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "26.0",
              "matchCriteriaId": "66CF3395-7CC9-41FD-8419-815AC6022191"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://support.apple.com/en-us/125108",
      "source": "[email protected]",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ]
    },
    {
      "url": "https://support.apple.com/en-us/125110",
      "source": "[email protected]"
    },
    {
      "url": "https://support.apple.com/en-us/125114",
      "source": "[email protected]",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ]
    },
    {
      "url": "https://support.apple.com/en-us/125115",
      "source": "[email protected]",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ]
    },
    {
      "url": "https://support.apple.com/en-us/125116",
      "source": "[email protected]",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ]
    }
  ]
}