cvelistv5 - cve-2025-43200

CVE-2025-43200 (GCVE-0-2025-43200)

Vulnerability from cvelistv5 – Published: 2025-06-16 21:36 – Updated: 2025-10-29 13:02

CISA

Summary

This issue was addressed with improved checks. This issue is fixed in watchOS 11.3.1, macOS Ventura 13.7.4, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iPadOS 17.7.5, visionOS 2.3.1, macOS Sequoia 15.3.1, iOS 18.3.1 and iPadOS 18.3.1, macOS Sonoma 14.7.4. A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.

Severity ?

4.2 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

CWE

A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.

Assigner

apple

References

URL

CISA Known Exploited Vulnerability

Data from the CISA Known Exploited Vulnerabilities Catalog

Date added: 2025-06-16

Due date: 2025-07-07

Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Used in ransomware: Unknown

Notes: https://support.apple.com/en-us/122174 ; https://support.apple.com/en-us/122173 ; https://support.apple.com/en-us/122900 ; https://support.apple.com/en-us/122901 ; https://support.apple.com/en-us/122902 ; https://support.apple.com/en-us/122903 ; https://support.apple.com/en-us/122904 ; https://nvd.nist.gov/vuln/detail/CVE-2025-43200

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 4.2,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2025-06-16",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-43200"
              },
              "type": "kev"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-43200",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-06-30T13:32:03.409332Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-29T13:02:01.640Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "url": "https://citizenlab.ca/2025/06/first-forensic-confirmation-of-paragons-ios-mercenary-spyware-finds-journalists-targeted/"
          },
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-43200"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "11.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved checks. This issue is fixed in watchOS 11.3.1, macOS Ventura 13.7.4, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iPadOS 17.7.5, visionOS 2.3.1, macOS Sequoia 15.3.1, iOS 18.3.1 and iPadOS 18.3.1, macOS Sonoma 14.7.4. A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-06-16T21:36:25.578Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122346"
        },
        {
          "url": "https://support.apple.com/en-us/122901"
        },
        {
          "url": "https://support.apple.com/en-us/122900"
        },
        {
          "url": "https://support.apple.com/en-us/122173"
        },
        {
          "url": "https://support.apple.com/en-us/122903"
        },
        {
          "url": "https://support.apple.com/en-us/122345"
        },
        {
          "url": "https://support.apple.com/en-us/122902"
        },
        {
          "url": "https://support.apple.com/en-us/122174"
        },
        {
          "url": "https://support.apple.com/en-us/122904"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-43200",
    "datePublished": "2025-06-16T21:36:25.578Z",
    "dateReserved": "2025-04-16T15:24:37.088Z",
    "dateUpdated": "2025-10-29T13:02:01.640Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "cisa_known_exploited": {
      "cveID": "CVE-2025-43200",
      "dateAdded": "2025-06-16",
      "dueDate": "2025-07-07",
      "knownRansomwareCampaignUse": "Unknown",
      "notes": "https://support.apple.com/en-us/122174 ; https://support.apple.com/en-us/122173 ; https://support.apple.com/en-us/122900 ; https://support.apple.com/en-us/122901 ; https://support.apple.com/en-us/122902 ; https://support.apple.com/en-us/122903 ; https://support.apple.com/en-us/122904 ; https://nvd.nist.gov/vuln/detail/CVE-2025-43200",
      "product": "Multiple Products",
      "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "shortDescription": "Apple iOS, iPadOS, macOS, watchOS, and visionOS, contain an unspecified vulnerability when processing a maliciously crafted photo or video shared via an iCloud Link.",
      "vendorProject": "Apple",
      "vulnerabilityName": "Apple Multiple Products Unspecified Vulnerability"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-43200\",\"sourceIdentifier\":\"product-security@apple.com\",\"published\":\"2025-06-16T22:16:41.120\",\"lastModified\":\"2025-10-30T15:51:11.487\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"This issue was addressed with improved checks. This issue is fixed in watchOS 11.3.1, macOS Ventura 13.7.4, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iPadOS 17.7.5, visionOS 2.3.1, macOS Sequoia 15.3.1, iOS 18.3.1 and iPadOS 18.3.1, macOS Sonoma 14.7.4. A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.\"},{\"lang\":\"es\",\"value\":\"Este problema se solucion\u00f3 mejorando las comprobaciones. Este problema se solucion\u00f3 en watchOS 11.3.1, macOS Ventura 13.7.4, iOS 15.8.4 y iPadOS 15.8.4, iOS 16.7.11 y iPadOS 16.7.11, iPadOS 17.7.5, visionOS 2.3.1, macOS Sequoia 15.3.1, iOS 18.3.1 y iPadOS 18.3.1, y macOS Sonoma 14.7.4. Exist\u00eda un problema l\u00f3gico al procesar una foto o un v\u00eddeo creado con fines maliciosos compartidos a trav\u00e9s de un enlace de iCloud. Apple tiene conocimiento de un informe que indica que este problema podr\u00eda haber sido explotado en un ataque extremadamente sofisticado contra personas espec\u00edficas.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N\",\"baseScore\":4.2,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":1.6,\"impactScore\":2.5}]},\"cisaExploitAdd\":\"2025-06-16\",\"cisaActionDue\":\"2025-07-07\",\"cisaRequiredAction\":\"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.\",\"cisaVulnerabilityName\":\"Apple Multiple Products Unspecified Vulnerability\",\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"15.8.4\",\"matchCriteriaId\":\"307F4698-5786-4CA5-98A8-E3AAF1E7A09D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"16.0\",\"versionEndExcluding\":\"16.7.11\",\"matchCriteriaId\":\"9323964E-AE9A-46DB-8E97-C74E77C914E2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"17.0\",\"versionEndExcluding\":\"17.7.5\",\"matchCriteriaId\":\"FE5060E3-0884-40C3-B9EE-B0A72B7E400F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"18.0\",\"versionEndExcluding\":\"18.3.1\",\"matchCriteriaId\":\"A77F4D69-3C11-4074-A7E6-C85767F026EF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"15.8.4\",\"matchCriteriaId\":\"F8A92F23-F3AF-4365-B405-70AFC1D9ECB3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"16.0\",\"versionEndIncluding\":\"16.7.11\",\"matchCriteriaId\":\"53A97BDC-343C-4767-BE85-21CB53EEC517\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"17.0\",\"versionEndIncluding\":\"18.3.1\",\"matchCriteriaId\":\"36145355-2878-4236-B2B7-ED32AEFD3862\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"13.7.4\",\"matchCriteriaId\":\"2B4C5FF9-09CB-426B-AFE2-519E7AB7EA4F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"14.0\",\"versionEndExcluding\":\"14.7.4\",\"matchCriteriaId\":\"D1B00E67-4EE3-49F8-9087-8C2FC95C9C6C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"15.0\",\"versionEndExcluding\":\"15.3.1\",\"matchCriteriaId\":\"5A4E86B3-4331-4C55-9B1F-A15A5FC88BA9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.3.1\",\"matchCriteriaId\":\"57566A2E-9B11-405D-8C46-F8FE45DA464B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"11.3.1\",\"matchCriteriaId\":\"F898D7BC-247F-434F-9F95-7771723C4F5C\"}]}]}],\"references\":[{\"url\":\"https://support.apple.com/en-us/122173\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/122174\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/122345\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/122346\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/122900\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/122901\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/122902\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/122903\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/122904\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://citizenlab.ca/2025/06/first-forensic-confirmation-of-paragons-ios-mercenary-spyware-finds-journalists-targeted/\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"tags\":[\"Press/Media Coverage\"]},{\"url\":\"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-43200\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"tags\":[\"US Government Resource\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 4.2, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N\", \"integrityImpact\": \"LOW\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"LOW\"}}, {\"other\": {\"type\": \"kev\", \"content\": {\"dateAdded\": \"2025-06-16\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-43200\"}}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-43200\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-06-30T13:32:03.409332Z\"}}}], \"references\": [{\"url\": \"https://citizenlab.ca/2025/06/first-forensic-confirmation-of-paragons-ios-mercenary-spyware-finds-journalists-targeted/\"}, {\"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-43200\", \"tags\": [\"government-resource\"]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"description\": \"CWE-noinfo Not enough information\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-06-17T13:19:26.556Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"Apple\", \"product\": \"iOS and iPadOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"16.7\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"macOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"14.7\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"macOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"15.3\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"iPadOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"17.7\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"watchOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"11.3\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"iOS and iPadOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"15.8\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"macOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"13.7\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"iOS and iPadOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"18.3\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"visionOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"2.3\", \"versionType\": \"custom\"}]}], \"references\": [{\"url\": \"https://support.apple.com/en-us/122346\"}, {\"url\": \"https://support.apple.com/en-us/122901\"}, {\"url\": \"https://support.apple.com/en-us/122900\"}, {\"url\": \"https://support.apple.com/en-us/122173\"}, {\"url\": \"https://support.apple.com/en-us/122903\"}, {\"url\": \"https://support.apple.com/en-us/122345\"}, {\"url\": \"https://support.apple.com/en-us/122902\"}, {\"url\": \"https://support.apple.com/en-us/122174\"}, {\"url\": \"https://support.apple.com/en-us/122904\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"This issue was addressed with improved checks. This issue is fixed in watchOS 11.3.1, macOS Ventura 13.7.4, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iPadOS 17.7.5, visionOS 2.3.1, macOS Sequoia 15.3.1, iOS 18.3.1 and iPadOS 18.3.1, macOS Sonoma 14.7.4. A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.\"}]}], \"providerMetadata\": {\"orgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"shortName\": \"apple\", \"dateUpdated\": \"2025-06-16T21:36:25.578Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2025-43200\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-10-29T13:02:01.640Z\", \"dateReserved\": \"2025-04-16T15:24:37.088Z\", \"assignerOrgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"datePublished\": \"2025-06-16T21:36:25.578Z\", \"assignerShortName\": \"apple\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

WID-SEC-W-2025-1314

Vulnerability from csaf_certbund - Published: 2025-06-11 22:00 - Updated: 2025-06-11 22:00

Summary

Apple Produkte: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung

Das Apple iOS (vormals iPhone OS) ist das Betriebssystem für das von Apple entwickelte Smartphone iPhone, iPad und iPod Touch. Das Apple iPadOS ist das Betriebssystem für das von Apple entwickelte iPad. Apple macOS ist ein Betriebssystem, das auf FreeBSD und Mach basiert.

Angriff

Ein Angreifer kann eine Schwachstelle in Apple iOS, Apple iPadOS und Apple macOS ausnutzen, um Sicherheitsvorkehrungen zu umgehen.

Betroffene Betriebssysteme

- iPhoneOS - MacOS X

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Das Apple iOS (vormals iPhone OS) ist das Betriebssystem f\u00fcr das von Apple entwickelte Smartphone iPhone, iPad und iPod Touch.\r\nDas Apple iPadOS ist das Betriebssystem f\u00fcr das von Apple entwickelte iPad.\r\nApple macOS ist ein Betriebssystem, das auf FreeBSD und Mach basiert.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann eine Schwachstelle in Apple iOS, Apple iPadOS und Apple macOS ausnutzen, um Sicherheitsvorkehrungen zu umgehen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- iPhoneOS\n- MacOS X",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2025-1314 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1314.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2025-1314 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1314"
      },
      {
        "category": "external",
        "summary": "About the security content of iOS 15.8.4 and iPadOS 15.8.4 vom 2025-06-11",
        "url": "https://support.apple.com/en-us/122345"
      },
      {
        "category": "external",
        "summary": "About the security content of iOS 16.7.11 and iPadOS 16.7.11 vom 2025-06-11",
        "url": "https://support.apple.com/en-us/122346"
      },
      {
        "category": "external",
        "summary": "About the security content of iOS 18.3.1 and iPadOS 18.3.1 vom 2025-06-11",
        "url": "https://support.apple.com/en-us/122174"
      },
      {
        "category": "external",
        "summary": "About the security content of iPadOS 17.7.5 vom 2025-06-11",
        "url": "https://support.apple.com/en-us/122173"
      },
      {
        "category": "external",
        "summary": "About the security content of macOS Sequoia 15.3.1 vom 2025-06-11",
        "url": "https://support.apple.com/en-us/122900"
      },
      {
        "category": "external",
        "summary": "About the security content of macOS Sonoma 14.7.4 vom 2025-06-11",
        "url": "https://support.apple.com/en-us/122901"
      },
      {
        "category": "external",
        "summary": "About the security content of macOS Ventura 13.7.4 vom 2025-06-11",
        "url": "https://support.apple.com/en-us/122902"
      }
    ],
    "source_lang": "en-US",
    "title": "Apple Produkte: Schwachstelle erm\u00f6glicht Umgehen von Sicherheitsvorkehrungen",
    "tracking": {
      "current_release_date": "2025-06-11T22:00:00.000+00:00",
      "generator": {
        "date": "2025-06-12T11:33:39.109+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.12"
        }
      },
      "id": "WID-SEC-W-2025-1314",
      "initial_release_date": "2025-06-11T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2025-06-11T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c15.8.4",
                "product": {
                  "name": "Apple iOS \u003c15.8.4",
                  "product_id": "T044589"
                }
              },
              {
                "category": "product_version",
                "name": "15.8.4",
                "product": {
                  "name": "Apple iOS 15.8.4",
                  "product_id": "T044589-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:iphone_os:15.8.4"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c16.7.11",
                "product": {
                  "name": "Apple iOS \u003c16.7.11",
                  "product_id": "T044590"
                }
              },
              {
                "category": "product_version",
                "name": "16.7.11",
                "product": {
                  "name": "Apple iOS 16.7.11",
                  "product_id": "T044590-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:iphone_os:16.7.11"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c18.3.1",
                "product": {
                  "name": "Apple iOS \u003c18.3.1",
                  "product_id": "T044591"
                }
              },
              {
                "category": "product_version",
                "name": "18.3.1",
                "product": {
                  "name": "Apple iOS 18.3.1",
                  "product_id": "T044591-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:iphone_os:18.3.1"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "iOS"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c15.8.4",
                "product": {
                  "name": "Apple iPadOS \u003c15.8.4",
                  "product_id": "T044592"
                }
              },
              {
                "category": "product_version",
                "name": "15.8.4",
                "product": {
                  "name": "Apple iPadOS 15.8.4",
                  "product_id": "T044592-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:ipados:15.8.4"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c16.7.11",
                "product": {
                  "name": "Apple iPadOS \u003c16.7.11",
                  "product_id": "T044593"
                }
              },
              {
                "category": "product_version",
                "name": "16.7.11",
                "product": {
                  "name": "Apple iPadOS 16.7.11",
                  "product_id": "T044593-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:ipados:16.7.11"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c18.3.1",
                "product": {
                  "name": "Apple iPadOS \u003c18.3.1",
                  "product_id": "T044594"
                }
              },
              {
                "category": "product_version",
                "name": "18.3.1",
                "product": {
                  "name": "Apple iPadOS 18.3.1",
                  "product_id": "T044594-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:ipados:18.3.1"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c17.7.5",
                "product": {
                  "name": "Apple iPadOS \u003c17.7.5",
                  "product_id": "T044595"
                }
              },
              {
                "category": "product_version",
                "name": "17.7.5",
                "product": {
                  "name": "Apple iPadOS 17.7.5",
                  "product_id": "T044595-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:ipados:17.7.5"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "iPadOS"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "Sequoia \u003c15.3.1",
                "product": {
                  "name": "Apple macOS Sequoia \u003c15.3.1",
                  "product_id": "T044596"
                }
              },
              {
                "category": "product_version",
                "name": "Sequoia 15.3.1",
                "product": {
                  "name": "Apple macOS Sequoia 15.3.1",
                  "product_id": "T044596-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:mac_os:sequoia__15.3.1"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Sonoma \u003c14.7.4",
                "product": {
                  "name": "Apple macOS Sonoma \u003c14.7.4",
                  "product_id": "T044599"
                }
              },
              {
                "category": "product_version",
                "name": "Sonoma 14.7.4",
                "product": {
                  "name": "Apple macOS Sonoma 14.7.4",
                  "product_id": "T044599-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:mac_os:sonoma__14.7.4"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Ventura \u003c13.7.4",
                "product": {
                  "name": "Apple macOS Ventura \u003c13.7.4",
                  "product_id": "T044600"
                }
              },
              {
                "category": "product_version",
                "name": "Ventura 13.7.4",
                "product": {
                  "name": "Apple macOS Ventura 13.7.4",
                  "product_id": "T044600-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:mac_os:ventura__13.7.4"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "macOS"
          }
        ],
        "category": "vendor",
        "name": "Apple"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-43200",
      "product_status": {
        "known_affected": [
          "T044599",
          "T044589",
          "T044600",
          "T044591",
          "T044590",
          "T044593",
          "T044592",
          "T044595",
          "T044594",
          "T044596"
        ]
      },
      "release_date": "2025-06-11T22:00:00.000+00:00",
      "title": "CVE-2025-43200"
    }
  ]
}

GHSA-WHFF-4X34-R5VX

Vulnerability from github – Published: 2025-06-17 00:30 – Updated: 2025-10-22 00:33

Details

Severity ?

4.8 (Medium)


                  
                    CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-43200"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-06-16T22:16:41Z",
    "severity": "MODERATE"
  },
  "details": "This issue was addressed with improved checks. This issue is fixed in watchOS 11.3.1, macOS Ventura 13.7.4, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iPadOS 17.7.5, visionOS 2.3.1, macOS Sequoia 15.3.1, iOS 18.3.1 and iPadOS 18.3.1, macOS Sonoma 14.7.4. A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.",
  "id": "GHSA-whff-4x34-r5vx",
  "modified": "2025-10-22T00:33:18Z",
  "published": "2025-06-17T00:30:30Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43200"
    },
    {
      "type": "WEB",
      "url": "https://citizenlab.ca/2025/06/first-forensic-confirmation-of-paragons-ios-mercenary-spyware-finds-journalists-targeted"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/122173"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/122174"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/122345"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/122346"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/122900"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/122901"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/122902"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/122903"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/122904"
    },
    {
      "type": "WEB",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-43200"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
      "type": "CVSS_V3"
    }
  ]
}

FKIE_CVE-2025-43200

Vulnerability from fkie_nvd - Published: 2025-06-16 22:16 - Updated: 2025-10-30 15:51

Severity ?

4.2 (Medium) - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Summary

References

URL	Tags
product-security@apple.com	https://support.apple.com/en-us/122173	Vendor Advisory
product-security@apple.com	https://support.apple.com/en-us/122174	Vendor Advisory
product-security@apple.com	https://support.apple.com/en-us/122345	Vendor Advisory
product-security@apple.com	https://support.apple.com/en-us/122346	Vendor Advisory
product-security@apple.com	https://support.apple.com/en-us/122900	Vendor Advisory
product-security@apple.com	https://support.apple.com/en-us/122901	Vendor Advisory
product-security@apple.com	https://support.apple.com/en-us/122902	Vendor Advisory
product-security@apple.com	https://support.apple.com/en-us/122903	Vendor Advisory
product-security@apple.com	https://support.apple.com/en-us/122904	Vendor Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0	https://citizenlab.ca/2025/06/first-forensic-confirmation-of-paragons-ios-mercenary-spyware-finds-journalists-targeted/	Press/Media Coverage
134c704f-9b21-4f2e-91b3-4a467353bcc0	https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-43200	US Government Resource

Impacted products

Vendor	Product	Version
apple	ipados	*
apple	ipados	*
apple	ipados	*
apple	ipados	*
apple	iphone_os	*
apple	iphone_os	*
apple	iphone_os	*
apple	macos	*
apple	macos	*
apple	macos	*
apple	visionos	*
apple	watchos	*

JSON

To clipboard

{
  "cisaActionDue": "2025-07-07",
  "cisaExploitAdd": "2025-06-16",
  "cisaRequiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
  "cisaVulnerabilityName": "Apple Multiple Products Unspecified Vulnerability",
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "307F4698-5786-4CA5-98A8-E3AAF1E7A09D",
              "versionEndExcluding": "15.8.4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9323964E-AE9A-46DB-8E97-C74E77C914E2",
              "versionEndExcluding": "16.7.11",
              "versionStartIncluding": "16.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FE5060E3-0884-40C3-B9EE-B0A72B7E400F",
              "versionEndExcluding": "17.7.5",
              "versionStartIncluding": "17.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A77F4D69-3C11-4074-A7E6-C85767F026EF",
              "versionEndExcluding": "18.3.1",
              "versionStartIncluding": "18.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F8A92F23-F3AF-4365-B405-70AFC1D9ECB3",
              "versionEndExcluding": "15.8.4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "53A97BDC-343C-4767-BE85-21CB53EEC517",
              "versionEndIncluding": "16.7.11",
              "versionStartIncluding": "16.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "36145355-2878-4236-B2B7-ED32AEFD3862",
              "versionEndIncluding": "18.3.1",
              "versionStartIncluding": "17.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2B4C5FF9-09CB-426B-AFE2-519E7AB7EA4F",
              "versionEndExcluding": "13.7.4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D1B00E67-4EE3-49F8-9087-8C2FC95C9C6C",
              "versionEndExcluding": "14.7.4",
              "versionStartIncluding": "14.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "5A4E86B3-4331-4C55-9B1F-A15A5FC88BA9",
              "versionEndExcluding": "15.3.1",
              "versionStartIncluding": "15.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "57566A2E-9B11-405D-8C46-F8FE45DA464B",
              "versionEndExcluding": "2.3.1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F898D7BC-247F-434F-9F95-7771723C4F5C",
              "versionEndExcluding": "11.3.1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "This issue was addressed with improved checks. This issue is fixed in watchOS 11.3.1, macOS Ventura 13.7.4, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iPadOS 17.7.5, visionOS 2.3.1, macOS Sequoia 15.3.1, iOS 18.3.1 and iPadOS 18.3.1, macOS Sonoma 14.7.4. A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals."
    },
    {
      "lang": "es",
      "value": "Este problema se solucion\u00f3 mejorando las comprobaciones. Este problema se solucion\u00f3 en watchOS 11.3.1, macOS Ventura 13.7.4, iOS 15.8.4 y iPadOS 15.8.4, iOS 16.7.11 y iPadOS 16.7.11, iPadOS 17.7.5, visionOS 2.3.1, macOS Sequoia 15.3.1, iOS 18.3.1 y iPadOS 18.3.1, y macOS Sonoma 14.7.4. Exist\u00eda un problema l\u00f3gico al procesar una foto o un v\u00eddeo creado con fines maliciosos compartidos a trav\u00e9s de un enlace de iCloud. Apple tiene conocimiento de un informe que indica que este problema podr\u00eda haber sido explotado en un ataque extremadamente sofisticado contra personas espec\u00edficas."
    }
  ],
  "id": "CVE-2025-43200",
  "lastModified": "2025-10-30T15:51:11.487",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 4.2,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 1.6,
        "impactScore": 2.5,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  },
  "published": "2025-06-16T22:16:41.120",
  "references": [
    {
      "source": "product-security@apple.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/122173"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/122174"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/122345"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/122346"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/122900"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/122901"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/122902"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/122903"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/122904"
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "tags": [
        "Press/Media Coverage"
      ],
      "url": "https://citizenlab.ca/2025/06/first-forensic-confirmation-of-paragons-ios-mercenary-spyware-finds-journalists-targeted/"
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "tags": [
        "US Government Resource"
      ],
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-43200"
    }
  ],
  "sourceIdentifier": "product-security@apple.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2025-43200 (GCVE-0-2025-43200)

CISA Known Exploited Vulnerability

Data from the CISA Known Exploited Vulnerabilities Catalog

WID-SEC-W-2025-1314

GHSA-WHFF-4X34-R5VX

FKIE_CVE-2025-43200

Tags

Sightings

Nomenclature