cbcvebase.
CVE-2025-43422
published 2025-11-04

CVE-2025-43422: The issue was addressed by adding additional logic. This issue is fixed in iOS 26.1 and iPadOS 26.1. An attacker with physical access to a device may be able…

PriorityP417medium4.6CVSS 3.1
AVPACLPRNUINSUCNIHAN
EPSS
0.19%
9.1th percentile
The issue was addressed by adding additional logic. This issue is fixed in iOS 26.1 and iPadOS 26.1. An attacker with physical access to a device may be able to disable Stolen Device Protection.

Affected

4 ranges
VendorProductVersion rangeFixed in
appleios_26.1_and_ipados
appleios_and_ipados< 26.126.1
appleipados< 26.126.1
appleiphone_os< 26.126.1
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.