Keystroke Monitoring Vulnerability in Apple iOS and iPadOS Products
CVE-2025-43495

5.4MEDIUM

Key Information:

Vendor

Apple
Status
iOS And iPad OS
Vendor
CVE Published:
4 November 2025

What is CVE-2025-43495?

A vulnerability in Apple iOS and iPadOS could potentially allow applications to monitor user keystrokes without obtaining proper user consent. This raises significant privacy concerns, as unauthorized access to keystroke data could lead to the compromise of sensitive information. Apple has released updates in iOS 26.1 and iPadOS 26.1 to address this issue and enhance security measures.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

iOS and iPadOS < 26.1

iOS and iPadOS < 18.7

References

https://support.apple.com/en-us/125632
https://support.apple.com/en-us/125633

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.