CVE-2025-43459

MediumCVSS 4.6

Published: 04/11/2025(UTC)Updated: 18/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

15th percentile - higher than 15% of all known CVEs

Summary

An authentication issue in watchOS was addressed with improved state management. The vulnerability affects watchOS 26.1 and earlier; an attacker with physical access to a locked Apple Watch may view Live Voicemail.

Risk Assessment

A person with physical access to the watch may access sensitive information such as voicemail content. The risk mainly concerns unattended devices.

Recommendation

Update watchOS to version 26.1 or later. Physical security of devices is also recommended.

Other vulnerabilities in watchOS

CVE-2026-43679Low
This issue was addressed with improved permissions checking. This issue is fixed in watchOS 26.4. An attacker with physical access to a locked Apple Watch may be able to view user contacts.

Original NVD description (English source)

An authentication issue was addressed with improved state management. This issue is fixed in watchOS 26.1. An attacker with physical access to a locked Apple Watch may be able to view Live Voicemail.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS