CVE-2025-43280

The issue was resolved by not loading remote images. This issue is fixed in iOS 18.6 and iPadOS 18.6. Forwarding an email could display remote images in Mail in Lockdown Mode.

CVSS 3.1

4.7CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

EPSS

0.2% chance of exploitation in the next 30 days; higher than 11% of CVEs (scores of 2026-10-25)

CWE

CWE-940

Published

2025-10-15

Modified

2026-10-08

Record from

the NVD, synced 2026-10-19

Affected

• apple:ipados
• apple:iphone_os

References

• https://support.apple.com/en-us/124147

Check your stackJSON