Product:
iOS and iPadOS
Summary
The issue was addressed with improved checks. An app may be able to monitor keystrokes without user permission. This vulnerability affects user privacy and security significantly.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.8 | CVE-2025-43362 |
Exploitation
To exploit this vulnerability, an attacker could create a malicious application that, once installed on a device, could monitor keystrokes without the user’s consent. This could lead to unauthorized access to sensitive information such as passwords and personal data. The attack requires no user interaction and can be executed over a network.
Affected Products
- iOS 18.7 – Affected version that allows keystroke monitoring without user permission.
- iPadOS 18.7 – Similar vulnerability as in iOS, affecting iPad users.
- iOS 26 – Newer version still vulnerable to the same issue.
- iPadOS 26 – Also affected by the keystroke monitoring vulnerability.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of iOS and iPadOS where the issue has been fixed. Regularly updating software can help protect against such vulnerabilities and enhance overall device security.