Fixed Intel

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Jul 7, 2025

CVE-2025-43200

High
EPSS 0.4%CISA KEV
Apple/Multiple Products

Description

Apple iOS, iPadOS, macOS, watchOS, and visionOS, contain an unspecified vulnerability when processing a maliciously crafted photo or video shared via an iCloud Link.

EPSS — Exploit Probability

0.4%

Higher than 58.8% of all CVEs

Required Action

https://support.apple.com/en-us/122174 ; https://support.apple.com/en-us/122173 ; https://support.apple.com/en-us/122900 ; https://support.apple.com/en-us/122901 ; https://support.apple.com/en-us/122902 ; https://support.apple.com/en-us/122903 ; https://support.apple.com/en-us/122904 ; https://nvd.nist.gov/vuln/detail/CVE-2025-43200

Risk Assessment

ELEVATED
In CISA KEV

Details

Severity
High
EPSS
0.4%
CISA KEV
Yes
Ransomware
Unknown
Articles
0

Timeline

Published

Jun 16, 2025

Added to KEV

Jun 16, 2025

Remediation Due

Jul 7, 2025

Affected Product

Apple

Multiple Products

View all Apple CVEs