CVE-2025-43455: Apple iPadOS

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

A privacy issue was addressed with improved checks. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. A malicious app may be able to take a screenshot of sensitive information in embedded views.

Affected products

• Apple iPadOS: before 26.1 (fixed in 26.1)
• Apple iPhone OS: before 26.1 (fixed in 26.1)
• Apple visionOS: before 26.1 (fixed in 26.1)
• Apple watchOS: before 26.1 (fixed in 26.1)

Published 2025-11-04. Last modified 2026-06-17.