PT-2025-44825 · Apple · Visionos+6

Published 2025-09-15 · Updated 2026-03-26 · CVE-2025-43376

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Safari versions prior to 26 tvOS versions prior to 26 watchOS versions prior to 26 iOS versions prior to 26 iPadOS versions prior to 26 visionOS versions prior to 26

Description A logic issue exists due to improved state management. A remote attacker may be able to view leaked DNS queries when Private Relay is enabled.

Recommendations Update Safari to version 26. Update tvOS to version 26. Update watchOS to version 26. Update iOS to version 26. Update iPadOS to version 26. Update visionOS to version 26.

Fix

Related Identifiers

CVE-2025-43376

Affected Products

Apple Macos

Safari

Ios

Ipados

Tvos

Visionos

Watchos

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2025-43376 · Security Note
• https://support.apple.com/en-us/125113 · Vendor Advisory
• https://support.apple.com/en-us/125116 · Vendor Advisory
• https://support.apple.com/en-us/125114 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-43376 · Vendor Advisory
• https://support.apple.com/en-us/125115 · Vendor Advisory
• https://support.apple.com/en-us/125108 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-43376 · Note
• https://support.apple.com/en-us/126793 · Note
• https://twitter.com/4A4556494C/status/2037212111974048192 · Twitter Post
• https://support.apple.com/en-us/125110 · Note
• https://t.me/cveNotify/145382 · Telegram Post