PT-2025-44904 · Apple · Ipados+1

Published 2025-11-04 · Updated 2025-11-05 · CVE-2025-43495

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.2 iPadOS versions prior to 18.7.2

Description An application may be capable of monitoring keystrokes without the user’s consent due to insufficient access control within the WebKit web page rendering module of iOS and iPadOS. The issue is related to flaws in access restriction. A remote attacker may be able to gain unauthorized access to protected information by exploiting this flaw.

Recommendations Update to iOS version 18.7.2 or later. Update to iPadOS version 18.7.2 or later.

Fix

Improper Access Control

Information Disclosure

Weakness Enumeration

CWE-284

CWE-200

Related Identifiers

BDU:2025-13932

CVE-2025-43495

Affected Products

Ios

Ipados

References · 6

• https://bdu.fstec.ru/vul/2025-13932 · Security Note
• https://osv.dev/vulnerability/CVE-2025-43495 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-43495 · Security Note
• https://support.apple.com/en-us/125632 · Vendor Advisory
• https://i.redd.it/exmh6wygc5zf1.png · Reddit Post
• https://support.apple.com/en-us/125633 · Note