NVD Vulnerability Detail

CVE-2025-43200

Summary	This issue was addressed with improved checks. This issue is fixed in watchOS 11.3.1, macOS Ventura 13.7.4, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iPadOS 17.7.5, visionOS 2.3.1, macOS Sequoia 15.3.1, iOS 18.3.1 and iPadOS 18.3.1, macOS Sonoma 14.7.4. A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.
Publication Date	June 17, 2025, 7:16 a.m.
Registration Date	June 18, 2025, 4:01 a.m.
Last Update	June 18, 2025, 12:52 a.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	https://citizenlab.ca/2025/06/first-forensic-confirmation-of-paragons-ios-mercenary-spyware-finds-journalists-targeted/	Press/Media Coverage
2	https://support.apple.com/en-us/122173	Vendor Advisory
3	https://support.apple.com/en-us/122174	Vendor Advisory
4	https://support.apple.com/en-us/122345	Vendor Advisory
5	https://support.apple.com/en-us/122346	Vendor Advisory
6	https://support.apple.com/en-us/122900	Vendor Advisory
7	https://support.apple.com/en-us/122901	Vendor Advisory
8	https://support.apple.com/en-us/122902	Vendor Advisory
9	https://support.apple.com/en-us/122903	Vendor Advisory
10	https://support.apple.com/en-us/122904	Vendor Advisory

Common Vulnerabilities List

JVN Vulnerability Information

複数のアップル製品における脆弱性

Title	複数のアップル製品における脆弱性
Summary	iPadOS、iOS、macOS 等複数のアップル製品には、不特定の脆弱性が存在します。
Possible impacts	情報を取得される、および情報を改ざんされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Feb. 10, 2025, midnight
Registration Date	June 23, 2025, 5:56 p.m.
Last Update	June 23, 2025, 5:56 p.m.

Affected System

アップル

iOS 15.8.4 未満

iOS 16.0 から 16.7.11

iOS 17.0 から 18.3.1

iPadOS 15.8.4 未満

iPadOS 16.0 以上 16.7.11 未満

iPadOS 17.0 以上 17.7.5 未満

iPadOS 18.0 以上 18.3.1 未満

macOS 13.7.4 未満

macOS 14.0 以上 14.7.4 未満

macOS 15.0 以上 15.3.1 未満

visionOS 2.3.1 未満

watchOS 11.3.1 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
CISA Known Exploited Vulnerabilities Catalog
1	CVE-2025-43200	https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Common Vulnerabilities and Exposures (CVE)
2	CVE-2025-43200	https://www.cve.org/CVERecord?id=CVE-2025-43200
National Vulnerability Database (NVD)
3	CVE-2025-43200	https://nvd.nist.gov/vuln/detail/CVE-2025-43200

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-noinfo	https://www.ipa.go.jp/security/vuln/scap/cwe.html

ベンダー情報

その他

No	Name	URL
関連文書
1	citizenlab.ca (first-forensic-confirmation-of-paragons-ios-mercenary-spyware-finds-journalists-targeted)	https://citizenlab.ca/2025/06/first-forensic-confirmation-of-paragons-ios-mercenary-spyware-finds-journalists-targeted/

Change Log

No	Changed Details	Date of change
1	[2025年06月23日] 掲載	June 23, 2025, 5:51 p.m.