PT-2025-44871 · Apple · Visionos+5

Zhongcheng Li · Published 2025-11-03 · Updated 2025-11-04 · CVE-2025-43436

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 26.1 iOS versions prior to 26.1 iPadOS versions prior to 26.1 tvOS versions prior to 26.1 visionOS versions prior to 26.1

Description A permissions issue existed that allowed an application to potentially list the applications installed on a user's device. This issue was resolved through the implementation of additional restrictions.

Recommendations Update watchOS to version 26.1. Update iOS to version 26.1. Update iPadOS to version 26.1. Update tvOS to version 26.1. Update visionOS to version 26.1.

Fix

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

CVE-2025-43436

Affected Products

Apple Macos

Ios

Ipados

Tvos

Visionos

Watchos

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-43436 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/726111 · Security Note
• https://osv.dev/vulnerability/CVE-2025-43436 · Vendor Advisory
• https://support.apple.com/en-us/125639 · Vendor Advisory
• https://support.apple.com/en-us/125632 · Vendor Advisory
• https://support.apple.com/en-us/125638 · Vendor Advisory
• https://support.apple.com/en-us/125637 · Vendor Advisory
• https://support.apple.com/en-us/125634 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-43436 · Note