Product:
tvOS, watchOS, visionOS, macOS Tahoe, iOS, iPadOS
Summary
A permissions issue was addressed with additional restrictions. This issue is fixed in tvOS 26, watchOS 26, visionOS 26, macOS Tahoe 26, iOS 26 and iPadOS 26. An app may be able to access sensitive user data.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-43317 |
Exploitation
To exploit this vulnerability, an attacker would need to have local access to the device and require user interaction. By leveraging the permissions issue, the attacker could potentially access sensitive user data without proper authorization.
Affected Products
- tvOS 26: Updated to address permissions issues.
- watchOS 26: Fixed vulnerabilities related to user data access.
- visionOS 26: Enhanced restrictions to protect sensitive information.
- macOS Tahoe 26: Addressed permissions issues affecting user data.
- iOS 26: Improved security measures to prevent unauthorized access.
- iPadOS 26: Updated to mitigate risks associated with sensitive data access.
Mitigation
To mitigate this vulnerability, users should ensure their devices are updated to the latest versions of tvOS, watchOS, visionOS, macOS Tahoe, iOS, and iPadOS. Regularly updating devices helps protect against potential exploits and enhances overall security.