This vulnerability (CVE-2025-43357) affects Apple iOS and iPadOS platforms and allows an app to potentially fingerprint the user due to insufficient redaction of sensitive information. Apple fixed the issue by improving redaction mechanisms in iOS 18.7, iPadOS 18.7, iOS 26, iPadOS 26, and macOS Sequoia 15.7, Sonoma 14.8, and Tahoe 26. The CVSS 3.1 vector (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) indicates local attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, high confidentiality impact, and no impact on integrity or availability.

An attacker with local access and requiring user interaction could fingerprint the user by exploiting insufficient redaction of sensitive information, potentially compromising user privacy. The confidentiality impact is high, but there is no impact on integrity or availability. No known exploits are reported in the wild.

Apple has released official fixes in iOS 18.7, iPadOS 18.7, iOS 26, iPadOS 26, and corresponding macOS versions. Users and administrators should apply these updates to remediate the vulnerability. Since this is not a cloud service, remediation depends on updating affected devices. Patch status is confirmed fixed in these versions.