{"history":[{"alert":0,"cve":"CVE-2025-43504","id":22817,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.00374, \"percentile\": 0.3182}"},{"alert":0,"cve":"CVE-2025-43504","id":20437,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.00374, \"percentile\": 0.31675}"},{"alert":0,"cve":"CVE-2025-43504","id":18406,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.00374, \"percentile\": 0.31628}"},{"alert":0,"cve":"CVE-2025-43504","id":16470,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.00374, \"percentile\": 0.31606}"},{"alert":0,"cve":"CVE-2025-43504","id":14448,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.00374, \"percentile\": 0.31581}"},{"alert":0,"cve":"CVE-2025-43504","id":12230,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.00374, \"percentile\": 0.31537}"},{"alert":0,"cve":"CVE-2025-43504","id":10216,"kind":"epss","observed_at":1793938800,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.00374, \"percentile\": 0.31544}"},{"alert":0,"cve":"CVE-2025-43504","id":7765,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.00374, \"percentile\": 0.31538}"},{"alert":0,"cve":"CVE-2025-43504","id":5542,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.00374, \"percentile\": 0.31424}"},{"alert":0,"cve":"CVE-2025-43504","id":3324,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.00374, \"percentile\": 0.31376}"},{"alert":1,"cve":"CVE-2025-43504","id":1827,"kind":"cna","observed_at":1793665375,"payload":"{\"containers\": {\"adp\": [{\"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"HIGH\", \"baseScore\": 4.9, \"baseSeverity\": \"MEDIUM\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"privilegesRequired\": \"HIGH\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"NONE\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H\", \"version\": \"3.1\"}}, {\"other\": {\"content\": {\"id\": \"CVE-2025-43504\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2025-11-04T13:07:16.935477Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-119\", \"description\": \"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2025-11-04T13:07:19.240Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"product\": \"Xcode\", \"vendor\": \"Apple\", \"versions\": [{\"lessThan\": \"26.1\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A buffer overflow was addressed with improved bounds checking. This issue is fixed in Xcode 26.1. A user in a privileged network position may be able to cause a denial-of-service.\"}], \"problemTypes\": [{\"descriptions\": [{\"description\": \"A user in a privileged network position may be able to cause a denial-of-service\", \"lang\": \"en\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2026-04-02T18:22:09.762Z\", \"orgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"shortName\": \"apple\"}, \"references\": [{\"url\": \"https://support.apple.com/en-us/125641\"}]}}, \"cveMetadata\": {\"assignerOrgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"assignerShortName\": \"apple\", \"cveId\": \"CVE-2025-43504\", \"datePublished\": \"2025-11-04T01:17:21.026Z\", \"dateReserved\": \"2025-04-16T15:27:21.193Z\", \"dateUpdated\": \"2026-04-02T18:22:09.762Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.2\"}"}],"record":{"affected":[{"product":"Xcode","vendor":"Apple","versions":[{"lessThan":"26.1","status":"affected","version":"0","versionType":"custom"}]}],"cna":{"containers":{"adp":[{"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":4.9,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}},{"other":{"content":{"id":"CVE-2025-43504","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-11-04T13:07:16.935477Z","version":"2.0.3"},"type":"ssvc"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-119","description":"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2025-11-04T13:07:19.240Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"product":"Xcode","vendor":"Apple","versions":[{"lessThan":"26.1","status":"affected","version":"0","versionType":"custom"}]}],"descriptions":[{"lang":"en","value":"A buffer overflow was addressed with improved bounds checking. This issue is fixed in Xcode 26.1. A user in a privileged network position may be able to cause a denial-of-service."}],"problemTypes":[{"descriptions":[{"description":"A user in a privileged network position may be able to cause a denial-of-service","lang":"en"}]}],"providerMetadata":{"dateUpdated":"2026-04-02T18:22:09.762Z","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple"},"references":[{"url":"https://support.apple.com/en-us/125641"}]}},"cveMetadata":{"assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","assignerShortName":"apple","cveId":"CVE-2025-43504","datePublished":"2025-11-04T01:17:21.026Z","dateReserved":"2025-04-16T15:27:21.193Z","dateUpdated":"2026-04-02T18:22:09.762Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"cna_checked":1794435601,"cve":"CVE-2025-43504","description":"A buffer overflow was addressed with improved bounds checking. This issue is fixed in Xcode 26.1. A user in a privileged network position may be able to cause a denial-of-service.","epss":{"date":"2026-11-12","epss":0.00374,"percentile":0.3182},"epss_checked":1794522003,"first_seen":1793665374,"kev":null,"kev_checked":1794522003,"products":"Apple Xcode","references":["https://support.apple.com/en-us/125641"],"score":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":4.9,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"HIGH","provider":"CISA-ADP","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"CVE-2025-43504","updated_at":1794500401,"workarounds":""},"sources":[{"canonical_url":"https://objective-see.org/blog/blog_0x83.html","id":38,"publisher":"Objective-See","title":"A Remote Pre-Authentication Overflow in LLDB's debugserver"}]}