BaseFortify

Publication date: 2025-11-04

Last updated on: 2025-12-01

Assigner: Apple Inc.

Description

The issue was addressed with improved UI. This issue is fixed in iOS 26 and iPadOS 26. Password fields may be unintentionally revealed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-04

Last Modified

2025-12-01

Generated

2026-07-06

AI Q&A

2025-11-04

EPSS Evaluated

2026-07-05

NVD

CVE-2025-43360

Affected Vendors & Products

Vendor	Product	Version / Range
apple	ipados	to 26.0 (exc)
apple	iphone_os	to 26.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This vulnerability involves password fields that may be unintentionally revealed due to an issue in the user interface. It was addressed by improving the UI and fixed in iOS 26 and iPadOS 26.

Impact Analysis

The vulnerability could lead to unintended exposure of password fields, potentially allowing unauthorized individuals to see passwords that should remain hidden, which may compromise user security.

Mitigation Strategies

Update your devices to iOS 26 or iPadOS 26 where the issue is fixed with improved UI to prevent password fields from being unintentionally revealed.

Hi! I’m here to help you understand CVE-2025-43360. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70