CVE-2025-43362

critical · 9.8

The issue was addressed with improved checks. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26. An app may be able to monitor keystrokes without user permission.

9.8

CVSS

1.1%

EPSS (exploit prob.)

64th

EPSS percentile

2025-09-15

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-200

Affected products

Vendor	Product	Affected versions
apple	ipados	< 18.7
apple	iphone_os	< 18.7

Check a specific version with /api/v1/cve/match.

References

https://support.apple.com/en-us/125108
https://support.apple.com/en-us/125109
http://seclists.org/fulldisclosure/2025/Sep/49
http://seclists.org/fulldisclosure/2025/Sep/50

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-43362