Apple Multiple Products Improper Locking Vulnerability

zetlyn/cve-kev vulnerability cve CVE-2025-43510 known 2026-03-20

Properties

cwes	CWE-667 receipt Source CISA Known Exploited Vulnerabilities Its words `CWE-667` Read by `field:cwes` Said since 2026-09-28 11:44 UTC Last answered 2026-10-04 20:16 UTC What the source handed over { "cveID": "CVE-2025-43510", "cwes": "CWE-667", "dateAdded": "2026-03-20", "dueDate": "2026-04-03", "forensicTriage": "No", "knownRansomwareCampaignUse": "Unknown", "notes": "https://support.apple.com/en-us/125632 ; https://support.apple.com/en-us/125633 ; https://support.apple.com/en-us/125634 ; https://support.apple.com/en-us/125635 ; https://support.apple.com/en-us/125636 ; https://support.apple.com/en-us/125637 ; https://support.apple.com/en-us/125638 ; https://support.apple.com/en-us/125639 ; https://nvd.nist.gov/vuln/detail/CVE-2025-43510", "product": "Multiple Products", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "shortDescription": "Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain an improper locking vulnerability that could allow a malicious application to cause unexpected changes in memory shared between processes.", "vendorProject": "Apple", "vulnerabilityName": "Apple Multiple Products Improper Locking Vulnerability" }
due_date	2026-04-03 receipt Source CISA Known Exploited Vulnerabilities Its words `2026-04-03` Read by `field:dueDate` Said since 2026-09-28 11:44 UTC Last answered 2026-10-04 20:16 UTC What the source handed over { "cveID": "CVE-2025-43510", "cwes": "CWE-667", "dateAdded": "2026-03-20", "dueDate": "2026-04-03", "forensicTriage": "No", "knownRansomwareCampaignUse": "Unknown", "notes": "https://support.apple.com/en-us/125632 ; https://support.apple.com/en-us/125633 ; https://support.apple.com/en-us/125634 ; https://support.apple.com/en-us/125635 ; https://support.apple.com/en-us/125636 ; https://support.apple.com/en-us/125637 ; https://support.apple.com/en-us/125638 ; https://support.apple.com/en-us/125639 ; https://nvd.nist.gov/vuln/detail/CVE-2025-43510", "product": "Multiple Products", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "shortDescription": "Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain an improper locking vulnerability that could allow a malicious application to cause unexpected changes in memory shared between processes.", "vendorProject": "Apple", "vulnerabilityName": "Apple Multiple Products Improper Locking Vulnerability" }
exploited	yes receipt Source CISA Known Exploited Vulnerabilities Its words `yes` Read by `const:yes` Said since 2026-09-28 11:44 UTC Last answered 2026-10-04 20:16 UTC What the source handed over { "cveID": "CVE-2025-43510", "cwes": "CWE-667", "dateAdded": "2026-03-20", "dueDate": "2026-04-03", "forensicTriage": "No", "knownRansomwareCampaignUse": "Unknown", "notes": "https://support.apple.com/en-us/125632 ; https://support.apple.com/en-us/125633 ; https://support.apple.com/en-us/125634 ; https://support.apple.com/en-us/125635 ; https://support.apple.com/en-us/125636 ; https://support.apple.com/en-us/125637 ; https://support.apple.com/en-us/125638 ; https://support.apple.com/en-us/125639 ; https://nvd.nist.gov/vuln/detail/CVE-2025-43510", "product": "Multiple Products", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "shortDescription": "Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain an improper locking vulnerability that could allow a malicious application to cause unexpected changes in memory shared between processes.", "vendorProject": "Apple", "vulnerabilityName": "Apple Multiple Products Improper Locking Vulnerability" }
forensic_triage	false receipt Source CISA Known Exploited Vulnerabilities Its words `No` Read by `field:forensicTriage` Said since 2026-09-28 11:44 UTC Last answered 2026-10-04 20:16 UTC What the source handed over { "cveID": "CVE-2025-43510", "cwes": "CWE-667", "dateAdded": "2026-03-20", "dueDate": "2026-04-03", "forensicTriage": "No", "knownRansomwareCampaignUse": "Unknown", "notes": "https://support.apple.com/en-us/125632 ; https://support.apple.com/en-us/125633 ; https://support.apple.com/en-us/125634 ; https://support.apple.com/en-us/125635 ; https://support.apple.com/en-us/125636 ; https://support.apple.com/en-us/125637 ; https://support.apple.com/en-us/125638 ; https://support.apple.com/en-us/125639 ; https://nvd.nist.gov/vuln/detail/CVE-2025-43510", "product": "Multiple Products", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "shortDescription": "Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain an improper locking vulnerability that could allow a malicious application to cause unexpected changes in memory shared between processes.", "vendorProject": "Apple", "vulnerabilityName": "Apple Multiple Products Improper Locking Vulnerability" }
known_ransomware_campaign_use	Unknown receipt Source CISA Known Exploited Vulnerabilities Its words `Unknown` Read by `field:knownRansomwareCampaignUse` Said since 2026-09-28 11:44 UTC Last answered 2026-10-04 20:16 UTC What the source handed over { "cveID": "CVE-2025-43510", "cwes": "CWE-667", "dateAdded": "2026-03-20", "dueDate": "2026-04-03", "forensicTriage": "No", "knownRansomwareCampaignUse": "Unknown", "notes": "https://support.apple.com/en-us/125632 ; https://support.apple.com/en-us/125633 ; https://support.apple.com/en-us/125634 ; https://support.apple.com/en-us/125635 ; https://support.apple.com/en-us/125636 ; https://support.apple.com/en-us/125637 ; https://support.apple.com/en-us/125638 ; https://support.apple.com/en-us/125639 ; https://nvd.nist.gov/vuln/detail/CVE-2025-43510", "product": "Multiple Products", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "shortDescription": "Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain an improper locking vulnerability that could allow a malicious application to cause unexpected changes in memory shared between processes.", "vendorProject": "Apple", "vulnerabilityName": "Apple Multiple Products Improper Locking Vulnerability" }
product	Multiple Products receipt Source CISA Known Exploited Vulnerabilities Its words `Multiple Products` Read by `field:product` Said since 2026-09-28 11:44 UTC Last answered 2026-10-04 20:16 UTC What the source handed over { "cveID": "CVE-2025-43510", "cwes": "CWE-667", "dateAdded": "2026-03-20", "dueDate": "2026-04-03", "forensicTriage": "No", "knownRansomwareCampaignUse": "Unknown", "notes": "https://support.apple.com/en-us/125632 ; https://support.apple.com/en-us/125633 ; https://support.apple.com/en-us/125634 ; https://support.apple.com/en-us/125635 ; https://support.apple.com/en-us/125636 ; https://support.apple.com/en-us/125637 ; https://support.apple.com/en-us/125638 ; https://support.apple.com/en-us/125639 ; https://nvd.nist.gov/vuln/detail/CVE-2025-43510", "product": "Multiple Products", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "shortDescription": "Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain an improper locking vulnerability that could allow a malicious application to cause unexpected changes in memory shared between processes.", "vendorProject": "Apple", "vulnerabilityName": "Apple Multiple Products Improper Locking Vulnerability" }
vendor_project	Apple receipt Source CISA Known Exploited Vulnerabilities Its words `Apple` Read by `field:vendorProject` Said since 2026-09-28 11:44 UTC Last answered 2026-10-04 20:16 UTC What the source handed over { "cveID": "CVE-2025-43510", "cwes": "CWE-667", "dateAdded": "2026-03-20", "dueDate": "2026-04-03", "forensicTriage": "No", "knownRansomwareCampaignUse": "Unknown", "notes": "https://support.apple.com/en-us/125632 ; https://support.apple.com/en-us/125633 ; https://support.apple.com/en-us/125634 ; https://support.apple.com/en-us/125635 ; https://support.apple.com/en-us/125636 ; https://support.apple.com/en-us/125637 ; https://support.apple.com/en-us/125638 ; https://support.apple.com/en-us/125639 ; https://nvd.nist.gov/vuln/detail/CVE-2025-43510", "product": "Multiple Products", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "shortDescription": "Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain an improper locking vulnerability that could allow a malicious application to cause unexpected changes in memory shared between processes.", "vendorProject": "Apple", "vulnerabilityName": "Apple Multiple Products Improper Locking Vulnerability" }

Text

Apple Multiple Products Improper Locking Vulnerability Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain an improper locking vulnerability that could allow a malicious application to cause unexpected changes in memory shared between processes. Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. https://support.apple.com/en-us/125632 ; https://support.apple.com/en-us/125633 ; https://support.apple.com/en-us/125634 ; https://support.apple.com/en-us/125635 ; https://support.apple.com/en-us/125636 ; https://support.apple.com/en-us/125637 ; https://support.apple.com/en-us/125638 ; https://support.apple.com/en-us/125639 ; https://nvd.nist.gov/vuln/detail/CVE-2025-43510