CVE-2025-43423

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2. An attacker with physical access to an unlocked device paired with a Mac may be able to view sensitive user information in system logging.
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*

History

01 Dec 2025, 20:15

Type Values Removed Values Added
CWE CWE-532

05 Nov 2025, 19:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-11-04 02:15

Updated : 2025-12-01 20:15


NVD link : CVE-2025-43423

Mitre link : CVE-2025-43423

CVE.ORG link : CVE-2025-43423


JSON object : View

Products Affected

apple

  • visionos
  • iphone_os
  • macos
  • ipados
CWE
NVD-CWE-noinfo CWE-532

Insertion of Sensitive Information into Log File