CVE-2025-43510: Apple Multiple Products improper locking in shared memory

CVE-2025-43510 · Severity: critical · CVSS 7.8 · Exploited in the wild · Published 2025-12-12

A security vulnerability exists in Apple's operating systems, including those for iPhones, Macs, and Apple Watches, that could allow a malicious app to interfere with other running programs. By exploiting a flaw in how the system manages shared memory, an attacker could potentially access or modify sensitive data belonging to other applications. This issue has been observed being used in targeted attacks in the wild.

Technologies: Apple iPadOS, Apple macOS Sequoia, Apple Multiple Products, Apple Tvos, Apple Visionos, Apple watchOS. Vendors: Apple.

Quick answers

Is CVE-2025-43510 exploited in the wild?
Yes. CVE-2025-43510 is known to be exploited in the wild, first recorded on 20 March 2026. Treat it as urgent.
How severe is CVE-2025-43510?
Critical severity, with a CVSS score of 7.8, published 12 December 2025.
Which products and versions are affected?
Apple iPadOS Before 18.7.2, and 26.0; Apple macOS Sequoia Before 15.7.2; Apple macOS Sonoma Before 14.8.2; Apple Tvos Before 26.1; and 2 more.
Is there a fix for CVE-2025-43510?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2025-43510 attacked?
It is attacked with local access, in an operating system.
Am I affected by CVE-2025-43510?
Check whether you run Apple iPadOS, Apple macOS Sequoia, Apple macOS Sonoma or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An improper locking vulnerability (CWE-667) exists in multiple Apple operating systems due to insufficient lock state checking during memory management. A local attacker can exploit this by running a malicious application that manipulates memory shared between processes, leading to memory corruption. This flaw can be used as part of an exploit chain to achieve unauthorized data access or elevated privileges. The issue has been addressed by improving lock state validation across iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. This vulnerability is confirmed to have been exploited in the wild.

Affected products

  • Apple iOS and iPadOS Before 18.7.2, and 26.0
  • Apple macOS Sequoia Before 15.7.2
  • Apple macOS Sonoma Before 14.8.2
  • Apple macOS Tahoe Before 26.1
  • Apple tvOS Before 26.1
  • Apple visionOS Before 26.1
  • Apple watchOS Before 26.1

Timeline

  • 2025-12-18: disclosed: Initial analysis by NIST
  • 2026-03-20: kev added: Added to CISA Known Exploited Vulnerabilities catalog
  • 2026-03-20: advisory: NVD advisory published

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.