{"id":"CVE-2025-43280","title":"The issue was resolved by not loading remote images","summary":"The issue was resolved by not loading remote images. This issue is fixed in iOS 18.6 and iPadOS 18.6. Forwarding an email could display remote images in Mail in Lockdown Mode.","severity":"medium","cvss":4.7,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","cwe":["CWE-940"],"vendor":"apple","product":"ipados","affected":["ipados < 18.6","iphone_os < 18.6"],"patched":["ipados 18.6","iphone_os 18.6"],"published":"2025-10-15","updated":"2026-10-08","sourceUpdated":"2026-10-08T11:10:00.250","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-43280","references":[{"url":"https://support.apple.com/en-us/124147","label":"product-security@apple.com"}],"tags":["nvd"],"epss":0.00211,"epssPercentile":0.10395,"ingestedAt":"2026-10-08T11:31:27.444Z","slug":"CVE-2025-43280","body":"## Overview\n\nThe issue was resolved by not loading remote images. This issue is fixed in iOS 18.6 and iPadOS 18.6. Forwarding an email could display remote images in Mail in Lockdown Mode.\n\n## Affected\n\n- `ipados < 18.6`\n- `iphone_os < 18.6`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `ipados 18.6`\n- `iphone_os 18.6`","depth":"sunlit","depthScore":26,"depthScoreParts":{"impact":25.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}