CVE-2025-43365 Details
Description
A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26 and iPadOS 26. An unprivileged process may be able to terminate a root processes.
A denial-of-service vulnerability has been identified in the MetricKit framework of Apple iOS 26 and iPadOS 26. This issue allows an unprivileged process to terminate a root process, potentially disrupting system operations.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Nov 4, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://support.apple.com/en-us/125108 | [email protected] | |
| https://support.apple.com/en-us/125633 | [email protected] |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-20 | Improper Input Validation | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| apple ipados | < 26.0 |
CPE
Remediation
| |
| apple iphone os | < 26.0 |
CPE
Remediation
| |
Change History
8 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 26, 2026 | CVE Translated | [email protected] |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 2, 2026 | CVE Modified | [email protected] |
| Nov 5, 2025 | CVE Modified | [email protected] |
| Nov 4, 2025 | Initial Analysis | [email protected] |
| Nov 4, 2025 | CVE Modified | CISA-ADP |
| Nov 4, 2025 | New CVE Received | [email protected] |