CVE-2025-43365
published 2025-11-04CVE-2025-43365: A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26 and iPadOS 26. An…
PriorityP410low2.8CVSS 3.1
AVLACLPRLUIRSUCNINAL
EPSS
0.12%
2.2th percentile
A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26 and iPadOS 26. An unprivileged process may be able to terminate a root processes.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios_18.7.2_and_ipados | — | — |
| apple | ios_26_and_ipados | — | — |
| apple | ios_and_ipados | < 18.7.2 | 18.7.2 |
| apple | ios_and_ipados | < 26 | 26 |
| apple | ipados | < 26.0 | 26.0 |
| apple | iphone_os | < 26.0 | 26.0 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Apple
CVE-2025-43365: iOS 18.7.2 and iPadOS 18.7.2
vendor_apple·2025-11-05·CVSS 2.8
CVE-2025-43365 [LOW] CVE-2025-43365: iOS 18.7.2 and iPadOS 18.7.2
Apple Security Update: About the security content of iOS 18.7.2 and iPadOS 18.7.2
Product: iOS 18.7.2 and iPadOS
Version: 18.7.2
CVE: CVE-2025-43365
Component: MetricKit
Impact: An unprivileged process may be able to terminate a root processes
Description: A denial-of-service issue was addressed with improved input validation.
Apple
CVE-2025-43365: iOS 26 and iPadOS 26
vendor_apple·2025-09-15·CVSS 2.8
CVE-2025-43365 [LOW] CVE-2025-43365: iOS 26 and iPadOS 26
Apple Security Update: About the security content of iOS 26 and iPadOS 26
Product: iOS 26 and iPadOS
Version: 26
CVE: CVE-2025-43365
Component: MetricKit
Impact: An unprivileged process may be able to terminate a root processes
Description: A denial-of-service issue was addressed with improved input validation.
GHSA
GHSA-fjxf-jv2m-vgh6: A denial-of-service issue was addressed with improved input validation
ghsa_unreviewed·2025-11-04
CVE-2025-43365 [LOW] CWE-20 GHSA-fjxf-jv2m-vgh6: A denial-of-service issue was addressed with improved input validation
A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 26 and iPadOS 26. An unprivileged process may be able to terminate a root processes.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-11-04
Published