PT-2025-44910 · Apple · Visionos+5

Renwax23 · Published 2025-11-03 · Updated 2025-11-04 · CVE-2025-43503

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 26.1 Apple watchOS versions prior to 26.1 Apple iPadOS versions prior to 26.1 Apple iOS versions prior to 26.1 Apple visionOS versions prior to 26.1

Description An inconsistent user interface issue existed due to improper state management. Visiting a malicious website could potentially lead to user interface spoofing.

Recommendations Update Apple Safari to version 26.1. Update Apple watchOS to version 26.1. Update Apple iPadOS to version 26.1. Update Apple iOS to version 26.1. Update Apple visionOS to version 26.1.

Fix

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-290

Related Identifiers

CVE-2025-43503

Affected Products

Apple Macos

Safari

Ios

Ipados

Visionos

Watchos

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-43503 · Security Note
• https://support.apple.com/en-us/125639 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-43503 · Vendor Advisory
• https://support.apple.com/en-us/125640 · Vendor Advisory
• https://support.apple.com/en-us/125632 · Vendor Advisory
• https://support.apple.com/en-us/125638 · Vendor Advisory
• https://support.apple.com/en-us/125634 · Note
• https://t.me/CVEtracker/36456 · Telegram Post
• https://support.apple.com/en-us/125633 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-43503 · Note