high Known exploitedREV. 01

CVE-2025-43510Apple platforms — locking flaw corrupts shared memory

A locking flaw across Apple's operating systems lets a malicious app make unexpected changes to memory it shares with other processes. It forms part of the DarkSword exploit chain and was fixed in the November 2025 releases.

YOUR NEXT MOVE

Update to iOS and iPadOS 18.7.2 or 26.1, macOS 15.7.2, 14.8.2 or 26.1, and the matching tvOS, visionOS and watchOS 26.1 builds now.

Read the risk

THE VITAL STATS
CVSS score
7.8/ 10
CVSS v3.1
EPSS probability
0%
Likelihood of exploitation
Attack complexity
Low
Conditions needed to exploit
Known exploited
Yes — CISA KEV
CVE published
2025-12-12
Added to KEV
2026-03-20
Exploit published
Not recorded
Confidence
high
Kill chain
privilege escalation
MITRE ATT&CK
—
Severity
high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attacker needsA malicious application already installed and running on the device.

Fixed iniOS 18.7.2, iPadOS 18.7.2, iOS 26.1, iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1

Behind the card

5 REFERENCES
Field-level provenanceTRACE THE SOURCES +

Which source supports each field, when it was retrieved, and who extracted it.

FieldsSourceRetrievedExtractorConfidence
cvss, exploitation.attack_complexity, exploitation.exploit_available, references, published_atnvd.nist.gov2026-09-24scrty-crds-pipeline/0.1high
exploitation.known_exploited, exploitation.kev_addedcisa.gov2026-09-24scrty-crds-pipeline/0.1high
epssapi.first.org2026-09-24scrty-crds-pipeline/0.1high
title, summary, severity, remediation, mitre_attack, kill_chain, recommended_action, confidence, tags, exploitation.prerequisitesnvd.nist.gov2026-09-24claude-codehigh

Printing history

THE RECORD
  1. r1Initial base card

First printing. This card has not been reprinted since publication.

crds:cve-2025-43510 · CRDS 0.1 · Issued 2026-09-24