CVE-2025-43428
- Source
- https://cve.org/CVERecord?id=CVE-2025-43428
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-43428.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-43428
- Published
- 2025-12-17T21:16:01.990Z
- Modified
- 2026-03-13T03:11:17.990424Z
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
A configuration issue was addressed with additional restrictions. This issue is fixed in visionOS 26.2, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2. Photos in the Hidden Photos Album may be viewed without authentication.
- References
Affected packages
Git /
Database specific
unresolved_ranges
[
{
"events": [
{
"introduced": "0"
},
{
"fixed": "26.2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "26.2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "26.2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "26.2"
}
]
}
]
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-43428.json"