{"id":"CVE-2025-43510","kind":"vulnerability","aliases":["CVE-2025-43510"],"related":[],"title":"A memory corruption issue was addressed with improved lock state checking","description":"Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain an improper locking vulnerability that could allow a malicious application to cause unexpected changes in memory shared between processes.\n\nCISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","summary":"Apple's iOS, iPadOS, macOS, watchOS, tvOS and visionOS have an improper locking bug that lets a malicious app change memory shared between processes. CISA lists it as actively exploited, so attackers are using it in the wild.","severity":"high","cvss":7.8,"epss":null,"exploited":true,"exploited_at":"2026-03-20T00:00:00+00:00","products":[{"name":"Apple Multiple Products","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"apple ipados","fixed":["18.7.2"],"affected":"< 18.7.2","ecosystem":"vendor"},{"name":"apple ipados","fixed":[],"affected":"= 26.0","ecosystem":"vendor"},{"name":"apple iphone os","fixed":["18.7.2"],"affected":"< 18.7.2","ecosystem":"vendor"},{"name":"apple iphone os","fixed":[],"affected":"= 26.0","ecosystem":"vendor"},{"name":"apple macos","fixed":["14.8.2"],"affected":">= 14.0, < 14.8.2","ecosystem":"vendor"},{"name":"apple macos","fixed":["15.7.2"],"affected":">= 15.0, < 15.7.2","ecosystem":"vendor"},{"name":"apple macos","fixed":[],"affected":"= 26.0","ecosystem":"vendor"},{"name":"apple tvos","fixed":["26.1"],"affected":"< 26.1","ecosystem":"vendor"},{"name":"apple visionos","fixed":["26.1"],"affected":"< 26.1","ecosystem":"vendor"},{"name":"apple watchos","fixed":["26.1"],"affected":"< 26.1","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["apple","exploited","ios","ipados","macos","tvos","vendor","visionos","watchos"],"not_affected_if":["unpatched-os-not-in-scope"],"how_to_check":"Check each device's OS version under Settings > General > About (iOS/iPadOS) or About This Mac (macOS) and compare against Apple's security release notes.","fix":"Update all Apple devices to the latest OS release that Apple lists as fixing CVE-2025-43510; the fixed version numbers are not in the sources.","status":"open","published_at":"2025-12-12T21:15:55+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T20:39:03+00:00","updated_at":"2026-10-23T23:44:51+00:00","category":"vendor","confidence":0.5,"triage":{"at":"2026-10-23T20:39:03Z","model":"claude-haiku-5-5","output":{"fix":"Update all Apple devices to the latest OS release that Apple lists as fixing CVE-2025-43510; the fixed version numbers are not in the sources.\nunknown","reach":"local","summary":"Apple's iOS, iPadOS, macOS, watchOS, tvOS and visionOS have an improper locking bug that lets a malicious app change memory shared between processes. CISA lists it as actively exploited, so attackers are using it in the wild.","category":"vendor","who_cares":["apple","ios","macos","ipados","watchos","tvos","visionos"],"confidence":0.5,"needs_auth":"unknown","worst_case":"A malicious installed app can corrupt memory shared between processes, possibly enabling further compromise.","analyst_note":"Find Apple's security content page for CVE-2025-43510 to get fixed OS versions and whether user interaction or exploit chaining is needed.","how_to_check":"Check each device's OS version under Settings > General > About (iOS/iPadOS) or About This Mac (macOS) and compare against Apple's security release notes.\nunknown\nunknown","needs_analyst":true,"not_affected_if":["unpatched-os-not-in-scope"],"user_interaction":"unknown","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000478,"input_tokens":2549,"output_tokens":447,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-01':130C '-2025':13A,16A '-43510':14A,17A '22':129C 'action':120C 'activ':80B 'address':6A 'allow':105C 'app':70B 'appl':43B,52B,90C 'apple':18A,21A,23A,25A,28A,31A,33A,35A,37A,39A,41A 'appli':121C 'applic':108C,127C 'attack':83B 'bod':128C 'bug':65B 'caus':110C 'chang':71B,112C 'check':11A 'cisa':76B,118C 'cloud':133C 'contain':98C 'corrupt':3A 'could':104C 'cve':12A,15A 'discontinu':136C 'exploit':44B,81B 'follow':126C 'guidanc':131C 'improp':63B,100C 'improv':8A 'instruct':125C 'io':45B,54B,92C 'ipado':46B,55B,93C 'ipados':22A,24A 'iphone':26A,29A 'issu':4A 'let':67B 'list':77B 'lock':9A,64B,101C 'maco':47B,56B,94C 'macos':32A,34A,36A 'malici':69B,107C 'memori':2A,72B,114C 'mitig':122C,142C 'multiple':19A 'os':27A,30A 'per':123C 'process':75B,117C 'product':140C 'products':20A 'requir':119C 'servic':134C 'share':73B,115C 'state':10A 'tvos':38A,48B,58B,97C 'unavail':144C 'unexpect':111C 'use':85B,137C 'vendor':49B,124C 'visiono':50B,60B,95C 'visionos':40A 'vulner':102C 'watcho':51B,57B,91C 'watchos':42A 'wild':89B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2025-12-12T21:15:55+00:00","kev":{"dateAdded":"2026-03-20","dueDate":"2026-04-03","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2025-43510","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-43510","severity":null,"published_at":"2026-03-20T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T14:39:38+00:00","note":null},{"source":"nvd","external_id":"CVE-2025-43510","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43510","severity":null,"published_at":"2025-12-12T21:15:55+00:00","modified_at":"2026-10-07T11:10:00+00:00","first_seen_at":"2026-10-23T23:44:51+00:00","fetched_at":"2026-10-23T23:44:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}