CVE-2025-43407PoC(apple / ipados)

MEDIUMCVSS 7.8 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Prioritize remediation for apple ipados systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

This issue was addressed with improved entitlements. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. An app may be able to break out of its sandbox.

4.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-284

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • ipados
  • iphone_os
  • macos
  • tvos

Threat summary

  • Public PoC and exploit tooling are both present
  • 1 mentions across 1 observed day

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
Products
ipadosiphone_osmacostvosvisionos

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-04-04: 1PoC Mentioned / Linked · 2026-04-04: 1Exploit Tool / Code · 2026-04-04: 104-04
Signal classification1 categories
PoC
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • SadishYT@Sadishyt
    PoC

    Sandbox-Escape-iOS-18.0-26.0 #exploit This uses CVE-2025-43407 as exploit and still testing working not gauranteed. https://github.com/mranonymous234/Sandbox-Escape-iOS-18.0-26.0 https://t.co/KEwQ61W8nJ

    Post summary

    A sandbox escape proof‑of‑concept for iOS 18.0–26.0 using CVE-2025-43407 has been posted with a GitHub repository, but the exploit’s functionality is still under testing.

    00000333
    12 followersView on X
CPE platform detail5 entries

5 of 5 entries

PartVendorProductVersionTarget SWTarget HW
OSappleipados---
OSappleiphone_os---
OSapplemacos---
OSappletvos---
OSapplevisionos---

Explore more