CVE-2025-43300Vulnerability
Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability
Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .
Reported by 2 independent sources · first reported by SecurityWeek · last reported
Last reported 25 days ago
CISA KEVAdded 21 Aug 2025
Fix due 11 Sep 2025
Used by ransomware: not knownCISA KEV catalogue
Fix due 11 Sep 2025
Used by ransomware: not knownCISA KEV catalogue
EPSS32.0%
higher than 98% of CVEsFIRST EPSS, as of 23 Oct 2026
higher than 98% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
2 reports, newest first · the exact sentence from each-
Apple Patches CoreGraphics Zero-Day Linked to Sophisticated Targeted Attacks“… that a vulnerability in its iOS and macOS applications, tracked as CVE-2025-55177, was likely chained with Apple’s ImageIO zero-day CVE-2025-43300 in zero-click attacks against fewer than 200 users.”
-
Apple Patches Meta-Reported Zero-Day Linked to ‘Extremely Sophisticated Attack’“…, when WhatsApp said a vulnerability in its iOS and macOS apps (CVE-2025-55177) was likely used alongside the Apple ImageIO zero-day CVE-2025-43300 in zero-click attacks aimed at fewer than 200 users.”
Indicators reported together
named in the same reportsAlso named with it: CVE-2026-86950, CVE-2025-55177, CVE-2026-65660, CVE-2026-20700
Thanks — we review every report.