What is the CVSS score of EUVD-2025-18428?

EUVD-2025-18428 has a CVSS 3.1 base score of 4.2 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N. EPSS exploitation probability: 0.4%.

Which versions of Apple are affected by EUVD-2025-18428?

Organizations using This should be aware of moderate risk from CVE-2025-43200 rated CVSS 4.2. Exploitation could compromise the security of affected deployments.. A patch is available.

Is EUVD-2025-18428 being actively exploited?

Yes, EUVD-2025-18428 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, confirming active in-the-wild exploitation. Immediate patching is required.

How to fix or mitigate EUVD-2025-18428?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Apple EUVD-2025-18428

| CVE-2025-43200 MEDIUM

2025-06-16 product-security@apple.com

Apple Information Disclosure

4.2

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

4.2 MEDIUM

AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

Patch available

Apr 16, 2026 - 05:29 EUVD

15.8,13.7,17.7

Added to CISA KEV

Apr 03, 2026 - 14:29 cisa

CISA KEV

EUVD ID Assigned

Mar 14, 2026 - 21:59 euvd

EUVD-2025-18428

Analysis Generated

Mar 14, 2026 - 21:59 vuln.today

CVE Published

Jun 16, 2025 - 22:16 nvd

MEDIUM 4.2

DescriptionCVE.org

This issue was addressed with improved checks. This issue is fixed in watchOS 11.3.1, macOS Ventura 13.7.4, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iPadOS 17.7.5, visionOS 2.3.1, macOS Sequoia 15.3.1, iOS 18.3.1 and iPadOS 18.3.1, macOS Sonoma 14.7.4. A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.