CVE-2025-43358

Description

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. A shortcut may be able to bypass sandbox restrictions.

References

https://thehackernews.com/2025/09/apple-backports-fix-for-cve-2025-43300.html

https://support.apple.com/en-us/125112

https://support.apple.com/en-us/125111

https://support.apple.com/en-us/125110

https://support.apple.com/en-us/125109

https://support.apple.com/en-us/125108

http://seclists.org/fulldisclosure/2025/Sep/55

http://seclists.org/fulldisclosure/2025/Sep/54

http://seclists.org/fulldisclosure/2025/Sep/53

http://seclists.org/fulldisclosure/2025/Sep/49

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS