CVE-2025-43449: Apple iPadOS

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

The issue was addressed with improved handling of caches. This issue is fixed in iOS 26.1 and iPadOS 26.1. A malicious app may be able to track users between installs.

Affected products

• Apple iPadOS: before 26.1 (fixed in 26.1)
• Apple iPhone OS: before 26.1 (fixed in 26.1)

Published 2025-11-04. Last modified 2026-06-17.