CVE-2025-43542

Published: Dec 12, 2025Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

This issue was addressed with improved state management. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Tahoe 26.2, visionOS 26.2. Password fields may be unintentionally revealed when remotely controlling a device over FaceTime.

Affected (1)

Products: Apple: Macos

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apple Macos	Before 15.7.3

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (5)

https://support.apple.com/en-us/125884

Source: product-security@apple.com

https://support.apple.com/en-us/125885

Source: product-security@apple.com

https://support.apple.com/en-us/125886

Source: product-security@apple.com

https://support.apple.com/en-us/125887

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/125891

Source: product-security@apple.com

Timeline

No history available yet.