What is the CVSS score of CVE-2025-43200?

CVE-2025-43200 has a CVSS 3.1 base score of 4.2 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N. EPSS exploitation probability: 0.4%.

Which versions of Apple are affected by CVE-2025-43200?

Organizations using This should be aware of moderate risk from CVE-2025-43200 rated CVSS 4.2. Exploitation could compromise the security of affected deployments.. A patch is available.

Is CVE-2025-43200 being actively exploited?

Yes, CVE-2025-43200 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, confirming active in-the-wild exploitation. Immediate patching is required.

How to fix or mitigate CVE-2025-43200?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Apple CVE-2025-43200

EUVD-2025-18428 MEDIUM

2025-06-16 product-security@apple.com

Information Disclosure Apple

4.2

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

Patch available

Apr 16, 2026 - 05:29 EUVD

15.8,13.7,17.7

Added to CISA KEV

Apr 03, 2026 - 14:29 cisa

CISA KEV

EUVD ID Assigned

Mar 14, 2026 - 21:59 euvd

EUVD-2025-18428

Analysis Generated

Mar 14, 2026 - 21:59 vuln.today

CVE Published

Jun 16, 2025 - 22:16 nvd

MEDIUM 4.2

DescriptionNVD

This issue was addressed with improved checks. This issue is fixed in watchOS 11.3.1, macOS Ventura 13.7.4, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iPadOS 17.7.5, visionOS 2.3.1, macOS Sequoia 15.3.1, iOS 18.3.1 and iPadOS 18.3.1, macOS Sonoma 14.7.4. A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.

AnalysisAI

A denial of service vulnerability in This (CVSS 4.2). Risk factors: actively exploited (KEV-listed).

Technical ContextAI

Vulnerability type: denial of service. Affects This.

RemediationAI

Monitor vendor channels for patch availability. This is CISA KEV-listed — federal agencies must remediate per BOD 22-01 deadlines.

More from same product – last 7 days

CVE-2026-44739 HIGH This Week

8.7 May 27

SQL injection in Pimcore's CustomReportsBundle (versions ≤ 12.3.5) lets an authenticated user holding the reports_config

CVE-2026-5817 HIGH This Week

8.2 May 22

Arbitrary code execution in Docker Model Runner's vllm-metal inference backend on macOS allows any container on the Dock

CVE-2026-5843 HIGH This Week

8.2 May 22

Arbitrary code execution in Docker Desktop's Model Runner on macOS allows any container on the Docker network to escape

CVE-2025-43306 HIGH This Week

7.8 May 26

Local privilege escalation in Apple macOS allows a malicious app already running with low privileges to elevate to root

CVE-2026-49237 HIGH This Week

7.8 May 28

Local privilege escalation in Canonical Multipass for macOS before 1.16.3 allows a low-privileged local user to obtain r

CVE-2025-43200 vulnerability details – vuln.today

Back