CVE-2025-43510: Apple Multiple Products Improper Locking Vulnerability.

Apple Multiple Products Improper Locking Vulnerability. Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain an improper locking vulnerability that could allow a malicious application to cause unexpected changes in memory shared between processes.

• CISA KEV-listed (remediation due 2026-04-03)
• EPSS 0.4% (29.4% percentile)
• CVSS 7.8 high

Related briefings

• Russia's APT29 hijacks websites to hack unpatched phones 2026-11-04

Linked threat actors

• APT29 machine-inferred link

Browse the CVE database

Read the full analysis on IntelFusions