CVE-2025-43437

Low · 3.3

CVSS

3.3

EPSS

0.1%

Published

Dec 12, 2025

CISA due date

—

The record

An information disclosure issue was addressed with improved privacy controls. This issue is fixed in iOS 26.1 and iPadOS 26.1. An app may be able to fingerprint the user.

Affected packages

Ecosystem	Package	Introduced	Fixed