BaseFortify

Publication date: 2025-11-04

Last updated on: 2025-12-17

Assigner: Apple Inc.

Description

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. An app may be able to identify what other apps a user has installed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-04

Last Modified

2025-12-17

Generated

2026-07-06

AI Q&A

2025-11-04

EPSS Evaluated

2026-07-05

NVD

CVE-2025-43442

Affected Vendors & Products

Vendor	Product	Version / Range
apple	ipados	to 26.1 (exc)
apple	iphone_os	to 26.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-276	During installation, installed file permissions are set to allow anyone to modify those files.

Attack-Flow Graph

Executive Summary

This vulnerability is a permissions issue where an app may be able to identify what other apps a user has installed on their device. It was addressed by adding additional restrictions in iOS 26.1 and iPadOS 26.1.

Impact Analysis

The vulnerability could impact you by allowing an app to detect other installed apps on your device, potentially compromising your privacy by revealing information about your app usage or preferences.

Mitigation Strategies

Update your devices to iOS 26.1 or iPadOS 26.1 or later, as this issue is fixed in these versions.

Hi! I’m here to help you understand CVE-2025-43442. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70