Cyber Resilience

CVE-2025-43203

Apple Ipados ≤ 18.7

Published
15 September 2025
Modified
02 April 2026
Patch / advisory
View advisory
CVSS Score v3.1 4.0
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS Score 0.0021 12th percentile
Risk Priority 35 floored blend · peak EPSS

Summary

CVE-2025-43203 is a medium-severity Insecure Storage of Sensitive Information (CWE-922) vulnerability in Apple Ipados. Its CVSS base score is 4.0 (Medium).

Operationally, ranked at the 12th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified map to AC-3 (Access Enforcement) and SC-28 (Protection of Information at Rest) — see the control section below for these in your framework.

OWASP Top 10 for Web (2025)

A01:2025 Broken Access Control

EU & UK References

Vulnerability Data

The issue was addressed with improved handling of caches. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26. An attacker with physical access to an unlocked device may be able to view an image…

more

in the most recently viewed locked note.

CWE(s)
CWE-922

Related Threats

CVEs Like This One

CVE-2023-23541Same product: Apple Ipados
CVE-2024-44200Same product: Apple Ipados
CVE-2024-44263Same product: Apple Ipados
CVE-2024-54485Same product: Apple Ipados
CVE-2024-40813Same product: Apple Ipados
CVE-2024-27789Same product: Apple Ipados
CVE-2024-27803Same product: Apple Ipados
CVE-2024-44127Same product: Apple Ipados
CVE-2025-31185Same product: Apple Ipados
CVE-2026-28858Same product: Apple Ipados

Affected Assets

apple
ipados
≤ 18.7
apple
iphone os
≤ 18.7

Mitigating Controls

Control response

Prevent
Stop it (NIST 800-53)
  • SC-28 Protection of Information at Rest
  • AC-3 Access Enforcement
  • AC-11 Device Lock
Detect
Catch it (NIST detect / respond)

—

Harden
Shrink the surface (DISA STIG)
  • 3 hardening rules · 2 OS baselines
Validate
Prove the fix (OWASP ASVS)

—

Mitigating Controls (NIST 800-53 r5) AI

SC-28 Protection of Information at Rest good match
prevent

Directly requires protection of sensitive information (note images) at rest so that cache remnants cannot be read after the note is locked.

AC-3 Access Enforcement good match
prevent

Enforces access-control decisions on locked notes, ensuring their cached content remains inaccessible even on an unlocked device.

AC-11 Device Lock partial match
prevent

Strengthens device- and application-level locking behavior that should clear or isolate note caches when a note transitions to the locked state.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.AA-05 mostly match
prevents

Enforces least-privilege permissions and authorization reviews that limit read/write access to stored sensitive data.

PR.DS-01 mostly match
prevents

Directly protects data-at-rest confidentiality via encryption or access controls that prevent unauthorized reads.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

A.7.10 Storage media none match
none

Secure reuse and disposal procedures, including cryptographic wiping and physical destruction, stop the insecure storage of sensitive data on media that may later be accessed by unauthorized actors.

A.7.14 Secure disposal or re-use of equipment none match
none

Mandating secure disposal techniques stops the insecure retention of sensitive information on storage media that leaves organizational control.

References