CVE-2025-43359
📊 9.8 CRITICAL⚡ 0.1%🎯 0 exploits
📅 Published Sep 15, 2025
📋 Status: Analyzed
A logic issue was addressed with improved state management. This issue is fixed in tvOS 26, macOS Sonoma 14.8, macOS Sequoia 15.7, iOS 18.7 and iPadOS 18.7, visionOS 26, watchOS 26, macOS Tahoe 26, iOS 26 and iPadOS 26. A UDP server socket bound to a local interface may become bound to all interfaces.
CVSS v3.1 • 134c704f-9b21-4f2e-91b3-4a467353bcc0
🎯 Affected Products & Systems
7 product configurations affected
Filter by type:
| Type | Vendor | Product | Version Range | Status | CPE String | 
|---|---|---|---|---|---|
| 💻OS | apple | ipados | < 18.7 | Vulnerable | cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* | 
| 💻OS | apple | iphone os | < 18.7 | Vulnerable | cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* | 
| 💻OS | apple | macos | ≥ 14.0 ∧ < 14.8 | Vulnerable | cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* | 
| 💻OS | apple | macos | ≥ 15.0 ∧ < 15.7 | Vulnerable | cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* | 
| 💻OS | apple | tvos | < 26.0 | Vulnerable | cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* | 
| 💻OS | apple | visionos | < 26.0 | Vulnerable | cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:* | 
| 💻OS | apple | watchos | < 26.0 | Vulnerable | cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* | 
Version: < 18.7
CPE:
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Version: ≥ 14.0 ∧ < 14.8
CPE:
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Version: ≥ 15.0 ∧ < 15.7
CPE:
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Version: < 26.0
CPE:
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
7 products•scroll for more
Metrics
9.8 CRITICALCVSS v3.1134c704f-9b21-4f2e-91b3-4a467353bcc0
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector:
NETWORK
Complexity:
LOW
Privileges:
NONE
User Interaction:
NONE
Confidentiality:
HIGH
Integrity:
HIGH
Availability:
HIGH
Scope:
UNCHANGED
🔍 Technical Details
Analysis Status
AnalyzedCVSS Details
9.8 (CRITICAL)v3.1
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS Details
0.1% (Minimal)21.6th percentile
Last updated: Oct 30, 2025
Exploitation probability within 30 days
Published Date
Sep 15, 2025 (1 month ago)
Last Modified
Sep 17, 2025 (1 month ago)
Security Weaknesses1
CWE-670
References9
NVDgeneralgeneral+6