CVE-2025-43356

Description

The issue was addressed with improved handling of caches. This issue is fixed in tvOS 26, Safari 26, iOS 18.7 and iPadOS 18.7, visionOS 26, watchOS 26, macOS Tahoe 26, iOS 26 and iPadOS 26. A website may be able to access sensor information without user consent.

PUBLISHED Reserved 2025-04-16 | Published 2025-09-15 | Updated 2025-09-16 | Assigner apple

Problem types

A website may be able to access sensor information without user consent

Product status

References

support.apple.com/en-us/125108

support.apple.com/en-us/125109

support.apple.com/en-us/125113

support.apple.com/en-us/125114

support.apple.com/en-us/125115

support.apple.com/en-us/125116

support.apple.com/en-us/125110

cve.org (CVE-2025-43356)

nvd.nist.gov (CVE-2025-43356)

Download JSON