CVE-2025-43309
BaseFortify
Publication date: 2025-11-04
Last updated on: 2025-11-04
Assigner: Apple Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| apple | ipados | to 26.0 (exc) |
| apple | iphone_os | to 26.0 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-284 | The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a logic issue in iOS and iPadOS that could allow an attacker with physical access to the device to view notification contents from the Lock Screen. It was addressed by improving checks in the system and fixed in iOS 26 and iPadOS 26.
How can this vulnerability impact me? :
If an attacker has physical access to your iOS device, they may be able to see the contents of your notifications without unlocking the device, potentially exposing sensitive information.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, update your iOS or iPadOS device to version 26 or later where the issue is fixed. Additionally, restrict physical access to your device to prevent unauthorized viewing of notification contents from the Lock Screen.