CVE-2025-43428 | THREATINT

Description

A configuration issue was addressed with additional restrictions. This issue is fixed in visionOS 26.2, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2. Photos in the Hidden Photos Album may be viewed without authentication.

PUBLISHED Reserved 2025-04-16 | Published 2025-12-17 | Updated 2025-12-18 | Assigner apple

Problem types

Photos in the Hidden Photos Album may be viewed without authentication

Product status

Any version before 26.2

affected

Any version before 26.2

affected

Any version before 26.2

affected

References

support.apple.com/en-us/125884

support.apple.com/en-us/125891

support.apple.com/en-us/125886

cve.org (CVE-2025-43428)

nvd.nist.gov (CVE-2025-43428)

Download JSON