CVE-2025-43426
BaseFortify
Publication date: 2025-11-04
Last updated on: 2026-04-02
Assigner: Apple Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| apple | ipados | to 26.1 (exc) |
| apple | iphone_os | to 26.1 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-532 | The product writes sensitive information to a log file. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is related to a logging issue where sensitive user data was not properly redacted. Due to this, an app may be able to access sensitive user data through logs. The issue has been fixed in iOS 26.1 and iPadOS 26.1 by improving data redaction in logs.
How can this vulnerability impact me? :
This vulnerability can impact you by potentially allowing an app to access sensitive user data that should have been protected. This could lead to unauthorized disclosure of personal or confidential information.
What immediate steps should I take to mitigate this vulnerability?
Update your devices to iOS 26.1 or iPadOS 26.1 or later, as the issue is fixed in these versions.