Medium severity5.5NVD Advisory· Published Sep 15, 2025· Updated Apr 2, 2026
CVE-2025-43190
CVE-2025-43190
Description
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <26.0
- (no CPE)range: <26
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*range: >=14.0,<14.8
- (no CPE)range: <15.7
- Range: <26
Patches
Vulnerability mechanics
References
11- support.apple.com/en-us/125108nvdRelease NotesVendor Advisory
- support.apple.com/en-us/125111nvdRelease NotesVendor Advisory
- support.apple.com/en-us/125112nvdRelease NotesVendor Advisory
- support.apple.com/en-us/125115nvdRelease NotesVendor Advisory
- support.apple.com/en-us/125116nvdRelease NotesVendor Advisory
- seclists.org/fulldisclosure/2025/Sep/53nvd
- seclists.org/fulldisclosure/2025/Sep/54nvd
- seclists.org/fulldisclosure/2025/Sep/55nvd
- seclists.org/fulldisclosure/2025/Sep/57nvd
- seclists.org/fulldisclosure/2025/Sep/58nvd
- support.apple.com/en-us/125110nvd
News mentions
0No linked articles in our index yet.