Vulnerability intelligence
CVE-2025-43510
Apple Multiple Products Improper Locking Vulnerability
Apple Multiple Products
A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious application may cause unexpected changes in memory shared between processes.
CVSS Score
—
Unrated
EPSS — Exploit Probability
0.4%
Riskier than 28% of all CVEs · checked 2026-10-19
Exploitation
Confirmed in the wild
KEV since 2026-03-20
Remediation
Unconfirmed
Federal deadline 2026-04-03
CISA required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Deadline for federal agencies: 2026-04-03.
9 articles across 6 outlets · first covered Mar 18, 2026 · latest Mar 22, 2026
Coverage timeline
-
U.S. CISA adds Apple, Laravel Livewire and Craft CMS flaws to its Known Exploited Vulnerabilities catalogsecurityaffairs.com · Mar 22, 2026
-
CISA Flags Apple, Craft CMS, Laravel Bugs in KEV, Orders Patching by April 3, 2026thehackernews.com · Mar 21, 2026
-
CISA Adds Five Known Exploited Vulnerabilities to Catalogwww.cisa.gov · Mar 20, 2026
-
CISA Adds CVE-2025-43510 to Known Exploited Vulnerabilities Cataloguewww.cisa.gov · Mar 20, 2026
-
CISA Adds CVE-2025-43510 to Known Exploited Vulnerabilities Cataloguecisa.gov · Mar 20, 2026
-
DarkSword emerges as powerful iOS exploit tool in global attackssecurityaffairs.com · Mar 19, 2026
-
DarkSword iOS Exploit Kit Uses 6 Flaws, 3 Zero-Days for Full Device Takeoverthehackernews.com · Mar 19, 2026
-
DarkSword: iPhone Exploit Kit Serves Spies & Thieves Alikewww.darkreading.com · Mar 18, 2026
-
‘DarkSword’ iOS Exploit Kit Used by State-Sponsored Hackers, Spyware Vendorswww.securityweek.com · Mar 18, 2026