VULNERABILITY INTELLIGENCE
CVE-2025-46308
CVSS score5.3 MEDIUM
EPSS probability0.23%
CISA KEVNot currently listed
Published2026-06-11
Last modified2026-10-07
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Description
An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to leak sensitive user information.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-284
Primary references
- product-security@apple.com — Release Notes, Vendor Advisory
- product-security@apple.com — Release Notes, Vendor Advisory