CVE-2025-43520 CISA KEV · Actively exploited
Buffer overflow in Apple macOS
CVSS score
5.5
EPSS probability
%0.4
Risk score
0.0
Published
10 mo ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds
Cybersecurity researchers have identified a set of 13 malicious Composer theme packages on Packagist that are designed to inject JavaScript into Vietnamese movie and comic streaming sites that install those libraries and initiate the deployment of spyware aimed at unpatched iOS devices. "The injected code runs two operations against a site's visitors: a mobile ad-fraud and gambling-redirect
Similar Vulnerabilities
10.0
CVE-2021-44228 Actively exploitedImproper input validation in Apache Log4j
Patch verified Public Exploits:22EPSS %100
7.5
CVE-2015-5477 Actively exploitedVulnerability in N/a
Patch verified Public Exploits:2EPSS %99
7.8
CVE-2018-15982 Actively exploitedUse after free in N/a
Patch verified Public Exploits:1EPSS %90
8.8
CVE-2022-2294 Actively exploitedVulnerability in Google Chrome
Patch status unknown Public Exploits:10EPSS %71
8.1
CVE-2024-6387Openssh: regresshion - race condition in ssh allows rce/dos
Patch verified Public Exploits:8EPSS %100
7.5
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-43520"