CVE-2025-43418
Medium · 4.6CVSS
4.6
EPSS
0.2%
Published
Nov 5, 2025
CISA due date
—
The record
This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. An attacker with physical access to a locked device may be able to view sensitive user information.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|