CVE-2025-43225

CVSS 5.5 MEDIUMEPSS 0.2%CWE-532

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 5.5EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

29 jul 2025Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A logging issue was addressed with improved data redaction. This issue is fixed in iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access sensitive user data.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Productos afectados

Apple · iPadOS Apple · macOS

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://seclists.org/fulldisclosure/2025/Jul/31 http://seclists.org/fulldisclosure/2025/Jul/32 http://seclists.org/fulldisclosure/2025/Jul/33 http://seclists.org/fulldisclosure/2025/Jul/34 https://support.apple.com/en-us/124148 https://support.apple.com/en-us/124149 https://support.apple.com/en-us/124150 https://support.apple.com/en-us/124151