Skip to main content

Watchos CVE-2025-43200

| EUVDEUVD-2025-18428 MEDIUM
2025-06-16 product-security@apple.com
Information Disclosure Apple Ipados Iphone Os Visionos Watchos
4.2
CVSS 3.1 · Vendor: apple
View

Vulnerability Assessment

Impact

CVSS 4.2. EPSS 0.4%. KEV-listed (actively exploited in the wild). No patch confirmed.
Exploit ScenarioDerived

An attacker could send specially crafted requests to This to cause resource exhaustion or application crash, disrupting service availability.
Act Now Prioritize within 24-48h. Why: In CISA KEV with patch available.
Exploited in the wild (CISA KEV) Patch available 0.4% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Mar 14, 2026

A denial of service vulnerability in This (CVSS 4.2). Risk factors: actively exploited (KEV-listed).

Earlier versions of this analysis (1)
v1 Mar 14, 2026 - 21:59 CVSS 4.2

This issue was addressed with improved checks. This issue is fixed in watchOS 11.3.1, macOS Ventura 13.7.4, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iPadOS 17.7.5, visionOS 2.3.1,

RemediationAI

Monitor vendor channels for patch availability. This is CISA KEV-listed — federal agencies must remediate per BOD 22-01 deadlines.

Affected VersionsENISA

iOS and iPadOS unspecified <15.8
macOS unspecified <13.7
iPadOS unspecified <17.7
macOS unspecified <15.3
visionOS unspecified <2.3
iOS and iPadOS unspecified <16.7
macOS unspecified <14.7
watchOS unspecified <11.3
iOS and iPadOS unspecified <18.3

Affected Packages

euvd ios_and_ipados_unspecified fix: 15.8, 16.7, 18.3
euvd ipados_unspecified fix: 17.7
euvd macos_unspecified fix: 13.7, 14.7, 15.3
euvd visionos_unspecified fix: 2.3
euvd watchos_unspecified fix: 11.3

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 5 packages in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Sign in to check
Technical ContextAI · show details

Vulnerability type: denial of service. Affects This.

Know when Watchos gets its next vulnerability

  • Watch products and get an email when something new is published
  • Check this CVE against your own stack and servers
  • Exploit and PoC references, threat intelligence from 22 sources
Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

Vendor (apple) PRIMARY 4.2 MEDIUM
AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Primary rating from Vendor (apple) · only source for this CVE.

CVSS VectorVendor: apple

Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
None

Lifecycle Timeline

3
Patch available
Apr 16, 2026 - 05:29 EUVD
15.8,13.7,17.7
Added to CISA KEV
Apr 03, 2026 - 14:29 cisa
CISA KEV
CVE Published
Jun 16, 2025 - 22:16 nvd
MEDIUM 4.2

DescriptionCVE.org

This issue was addressed with improved checks. This issue is fixed in watchOS 11.3.1, macOS Ventura 13.7.4, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iPadOS 17.7.5, visionOS 2.3.1, macOS Sequoia 15.3.1, iOS 18.3.1 and iPadOS 18.3.1, macOS Sonoma 14.7.4. A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.

Executive ViewAI

Why It Matters

Organizations using This should be aware of moderate risk from CVE-2025-43200 rated CVSS 4.2. Exploitation could compromise the security of affected deployments. This vulnerability is actively exploited in the wild (KEV-listed). Organizations should apply vendor updates when available and monitor for exploitation.

Business Impact: High
Compensating Controls

Apply vendor patch. If patching is delayed: restrict network access and enable monitoring.

Threat Intelligence Overview

EPSS Score
0.4%
Top 41% exploitable
Data Quality
5 sources
Confidence: Medium
EUVD NVD CVE.org CISA KEV EPSS VulDB

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue
Severity MEDIUM
CISA KEV Yes
Public POC No
EPSS 0.4%
Patch available Yes
Active threat Yes
Deciding rule
In CISA KEV with patch available
What every action level means
Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.
Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.
This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.
This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.
Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived
Out-of-Cycle
Exploitation· derived
Active
System Exposure· derived
Open
Automatable· derived
No
Human Impact
High

Priority Score

71
Low Medium High Critical
KEV: +50
EPSS: 0
CVSS: +21
PoC: 0
Weaponized: 0
Threat intel: 0
Gov advisory: 0

Attack Technique

Information Disclosure MEDIUM

Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.

More in Watchos

View all
CVE-2022-2294 HIGH
8.8 Jul 28

Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit
CVE-2017-13861 HIGH POC
7.8 Dec 25

An issue was discovered in certain Apple products. Rated high severity (CVSS 7.8), this vulnerability is no authenticati
CVE-2016-0801 CRITICAL POC
9.8 Feb 07

The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01

CVE-2025-31277 HIGH POC
8.8 Jul 30

WebKit memory corruption in Safari 18.6 and multiple Apple platforms allows remote code execution when processing malici
CVE-2016-4669 HIGH POC
7.8 Feb 20

An issue was discovered in certain Apple products. Rated high severity (CVSS 7.8), this vulnerability is low attack comp
CVE-2025-43510 HIGH POC
7.8 Dec 12

Apple kernel lock state checking flaw allows a malicious application to cause unexpected changes in memory shared betwee
CVE-2017-2370 HIGH POC
7.8 Feb 20

An issue was discovered in certain Apple products. Rated high severity (CVSS 7.8), this vulnerability is no authenticati
CVE-2025-24201 CRITICAL
10.0 Mar 11

A critical out-of-bounds write in WebKit's rendering engine allows maliciously crafted web content to escape the Web Con
CVE-2014-8147 HIGH POC
7.5 May 25

The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in I
CVE-2025-43520 MEDIUM POC
5.5 Dec 12

Apple kernel memory corruption in multiple operating systems allows a malicious application to cause unexpected system t
CVE-2022-37434 CRITICAL POC
9.8 Aug 05

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header
CVE-2025-14174 HIGH
8.8

Out-of-bounds write (CWE-787) in QtWebEngine before 6.10.1-r2 on Alpine Linux, and in other Chromium-based engines such

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2025-68613 HIGH POC
8.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5

References

Advisories & patches
ADVISORY https://citizenlab.ca/2025/06/first-forensic-confirmation-of-paragons-ios-mercenary-spyware-finds-journalists-targeted ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2025-43200 ADVISORY https://support.apple.com/en-us/122173 ADVISORY https://support.apple.com/en-us/122174 ADVISORY https://support.apple.com/en-us/122345 ADVISORY https://support.apple.com/en-us/122346 ADVISORY https://support.apple.com/en-us/122900 ADVISORY https://support.apple.com/en-us/122901 ADVISORY https://support.apple.com/en-us/122902 ADVISORY https://support.apple.com/en-us/122903 ADVISORY https://support.apple.com/en-us/122904 ADVISORY https://vuldb.com/vuln/312675 ADVISORY https://vuldb.com/vuln/312676 ADVISORY https://vuldb.com/vuln/312677 ADVISORY https://vuldb.com/vuln/312678 REF https://citizenlab.ca/2025/06/first-forensic-confirmation-of-paragons-ios-mercenary-spyware-finds-journalists-targeted/ REF https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-43200

Search Externally

GitHub PoC Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy