{
 "schema_version": "1.0",
 "agent_rules": [
  "Use only read-only checks (the commands marked read_only, or the app's own About menu). Never run anything that changes the computer.",
  "Never install, update, uninstall or change settings without the user's clear OK for that exact step.",
  "Only give the user the official links in this feed (official_patch_links and sources). Never send them to a download from anywhere else.",
  "If you cannot tell whether the user is affected, say so plainly instead of guessing.",
  "Say 'unconfirmed' when an incident's confidence is 'unconfirmed'."
 ],
 "incident": {
  "id": "apple-attacked-bugs-nov-2025",
  "url": "https://patchgap.ai/incidents/apple-attacked-bugs-nov-2025/",
  "path": "/incidents/apple-attacked-bugs-nov-2025/",
  "json_url": "https://patchgap.ai/incidents/apple-attacked-bugs-nov-2025.json",
  "title": "Mac, iPhone and iPad: two bugs fixed in November 2025 were later found in real attacks",
  "category": "mac",
  "platforms": [
   "macos",
   "ios"
  ],
  "products": [
   "macos",
   "iphone-ios"
  ],
  "status": "patched",
  "status_label": "Patched: update now",
  "severity": "high",
  "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).",
  "exploited_in_wild": "yes",
  "exploited_note": "CISA added both to its list of bugs used in real attacks on Mar 20, 2026.",
  "exploited_source_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
  "confidence": "confirmed",
  "confidence_note": null,
  "first_reported": "2025-11-03",
  "updated_at": "2026-10-27",
  "cves": [
   "CVE-2025-43510",
   "CVE-2025-43520"
  ],
  "summary": "Two bugs in the core of Apple's systems let a bad app take more control of a Mac, iPhone or iPad. Apple fixed them in November 2025. In March 2026 the US government said attackers were using them.",
  "am_i_affected": "You are at risk if your Mac runs macOS Tahoe older than 26.1, Sequoia older than 15.7.2 or Sonoma older than 14.8.2, or your iPhone runs iOS 26 older than 26.1.",
  "action": "Update your Mac and iPhone (Nov 2025 updates or newer)",
  "affected": [
   {
    "product": "macos",
    "product_name": "macOS",
    "platform": "macos",
    "affected_versions": "macOS Tahoe before 26.1, Sequoia before 15.7.2, Sonoma before 14.8.2",
    "fixed_version": "26.1 (Tahoe) / 15.7.2 (Sequoia) / 14.8.2 (Sonoma)",
    "fixed_min": null,
    "fix_note": null,
    "fixed_source_urls": [
     "https://support.apple.com/en-us/125634",
     "https://support.apple.com/en-us/125635",
     "https://support.apple.com/en-us/125636"
    ],
    "check": {
     "menu_path": "Apple menu > About This Mac. Or Apple menu > System Settings > General > Software Update.",
     "command": "sw_vers -productVersion",
     "shell": "Terminal",
     "read_only": true
    },
    "official_download": "https://support.apple.com/en-us/108382"
   },
   {
    "product": "iphone-ios",
    "product_name": "iPhone and iPad (iOS)",
    "platform": "ios",
    "affected_versions": "iOS and iPadOS 26 before 26.1",
    "fixed_version": "iOS 26.1",
    "fixed_min": "26.1",
    "fix_note": null,
    "fixed_source_urls": [
     "https://support.apple.com/en-us/125632"
    ],
    "check": {
     "menu_path": "On your iPhone: Settings > General > About to see your version. Settings > General > Software Update to update.",
     "command": null,
     "shell": null,
     "read_only": null
    },
    "official_download": "https://support.apple.com/en-us/100100"
   }
  ],
  "fix_steps": [
   "Click the Apple menu > System Settings > General > Software Update.",
   "Install the update it offers.",
   "Restart your Mac when asked.",
   "On iPhone or iPad: Settings > General > Software Update."
  ],
  "official_patch_links": [
   {
    "label": "Apple: update macOS on your Mac",
    "url": "https://support.apple.com/en-us/108382"
   },
   {
    "label": "Apple: update your iPhone or iPad",
    "url": "https://support.apple.com/en-us/100100"
   },
   {
    "label": "Apple security releases",
    "url": "https://support.apple.com/en-us/100100"
   }
  ],
  "extra_checks": [],
  "sources": [
   {
    "url": "https://support.apple.com/en-us/125634",
    "title": "Apple: About the security content of macOS Tahoe 26.1",
    "date": "2025-11-03",
    "kind": "vendor",
    "official": true
   },
   {
    "url": "https://support.apple.com/en-us/125635",
    "title": "Apple: About the security content of macOS Sequoia 15.7.2",
    "date": "2025-11-03",
    "kind": "vendor",
    "official": true
   },
   {
    "url": "https://support.apple.com/en-us/125636",
    "title": "Apple: About the security content of macOS Sonoma 14.8.2",
    "date": "2025-11-03",
    "kind": "vendor",
    "official": true
   },
   {
    "url": "https://support.apple.com/en-us/125632",
    "title": "Apple: About the security content of iOS 26.1 and iPadOS 26.1",
    "date": "2025-11-03",
    "kind": "vendor",
    "official": true
   },
   {
    "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
    "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2025-43510, CVE-2025-43520 (added 2026-03-20)",
    "date": "2026-03-20",
    "kind": "cisa",
    "official": true
   }
  ]
 }
}