CVE-2025-43376 — Vulnetix

Try Vulnetix Request Demo

CVE-2025-43376 PUBLISHED CVSS 6.800000190734863 MEDIUM

A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.2 and iPadOS 26.2. A user with physical access to an iOS device may be able to bypass Activation Lock.

EPSS 0.05% · 14.4th percentile

Risk Scores

CVSS v3.1

6.800000190734863

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

0.05%

14.4th percentile

Affected Products

Vendor	Product	Versions
Apple	iOS and iPadOS	0, 0

Timeline

Nov 4, 2025 EPSS Score
Nov 4, 2025 CVE Published
Nov 9, 2025 EPSS Score
Nov 14, 2025 EPSS Score
Nov 19, 2025 EPSS Score
Nov 23, 2025 EPSS Score
Nov 28, 2025 EPSS Score
Dec 3, 2025 EPSS Score
Dec 8, 2025 EPSS Score
Dec 13, 2025 EPSS Score
Dec 18, 2025 EPSS Score
Dec 23, 2025 EPSS Score

References

https://support.apple.com/en-us/126793 advisory
https://support.apple.com/en-us/126794 advisory
https://support.apple.com/en-us/126798 advisory
https://support.apple.com/en-us/126800 advisory
https://support.apple.com/en-us/126796 advisory
https://support.apple.com/en-us/126792 advisory
https://support.apple.com/en-us/126795 advisory
https://support.apple.com/en-us/126799 advisory
https://support.apple.com/en-us/126797 advisory
https://support.apple.com/en-us/126801 advisory
https://support.apple.com/en-us/125884 url

Open in Interactive Console →