CVE-2025-43436

Опубликовано: 04 нояб. 2025

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

A permissions issue was addressed with additional restrictions. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, visionOS 26.1. An app may be able to enumerate a user's installed apps.

Ссылки

https://support.apple.com/en-us/125632
Release Notes
Vendor Advisory
https://support.apple.com/en-us/125634
https://support.apple.com/en-us/125637
Release Notes
Vendor Advisory
https://support.apple.com/en-us/125638
Release Notes
Vendor Advisory
https://support.apple.com/en-us/125639
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия до 26.1 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 26.1 (исключая)

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

Версия до 26.1 (исключая)

cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*

Версия до 26.1 (исключая)

cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Версия до 26.1 (исключая)

EPSS

Процентиль: 12%

0.00039

Низкий

7.5 High

CVSS3

Дефекты

CWE-288

Связанные уязвимости

GHSA-3jx8-9w5m-fvm9

CVSS3: 7.5

github

3 месяца назад

A permissions issue was addressed with additional restrictions. This issue is fixed in watchOS 26.1, iOS 26.1 and iPadOS 26.1, tvOS 26.1, visionOS 26.1. An app may be able to enumerate a user's installed apps.

EPSS

Процентиль: 12%

0.00039

Низкий

7.5 High

CVSS3

Дефекты

CWE-288