CVE-2025-43449

High · 7.5

CVSS

7.5

EPSS

0.5%

Published

Nov 4, 2025

CISA due date

—

The record

The issue was addressed with improved handling of caches. This issue is fixed in iOS 26.1 and iPadOS 26.1. A malicious app may be able to track users between installs.

Affected packages

Ecosystem	Package	Introduced	Fixed