CVE-2025-43223

Published: Jul 30, 2025Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7, tvOS 18.6, visionOS 2.6, watchOS 11.6. A non-privileged user may be able to modify restricted network settings.

Affected (9)

Products: Apple: Ipados, Iphone Os, Macos, Tvos, Visionos, Watchos

6 products

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Apple Ipados	version < 17.7.7
Apple Ipados	18.0 ≤ version < 18.6
Apple Iphone Os	version < 18.6
Apple Macos	version < 13.7.7
Apple Macos	14.0 ≤ version < 14.7.7
Apple Macos	15.0 ≤ version < 15.6
Apple Tvos	version < 18.6
Apple Visionos	version < 2.6
Apple Watchos	version < 11.6

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (15)

https://support.apple.com/en-us/124147

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/124148

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/124149

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/124150

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/124151

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/124153

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/124154

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/124155

Source: product-security@apple.com

Release NotesVendor Advisory

http://seclists.org/fulldisclosure/2025/Jul/30

Source: af854a3a-2127-422b-91ae-364da2661108

http://seclists.org/fulldisclosure/2025/Jul/31

Source: af854a3a-2127-422b-91ae-364da2661108

http://seclists.org/fulldisclosure/2025/Jul/32

Source: af854a3a-2127-422b-91ae-364da2661108

http://seclists.org/fulldisclosure/2025/Jul/33

Source: af854a3a-2127-422b-91ae-364da2661108

http://seclists.org/fulldisclosure/2025/Jul/35

Source: af854a3a-2127-422b-91ae-364da2661108

http://seclists.org/fulldisclosure/2025/Jul/36

Source: af854a3a-2127-422b-91ae-364da2661108

http://seclists.org/fulldisclosure/2025/Jul/37

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.