Vulnerability-Lookup

CVE-2025-30448 (GCVE-0-2025-30448)

Vulnerability from cvelistv5 – Published: 2025-05-12 21:42 – Updated: 2026-04-02 18:12

Summary

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.4, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, visionOS 2.5. An attacker may be able to turn on sharing of an iCloud folder without authentication.

Severity

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-05-14 16:29 UTC

CWE

An attacker may be able to turn on sharing of an iCloud folder without authentication
CWE-862 - Missing Authorization

Assigner

apple mitre root

References

9 references

URL	Tags
https://support.apple.com/en-us/122373
https://support.apple.com/en-us/122404
https://support.apple.com/en-us/122405
https://support.apple.com/en-us/122717
https://support.apple.com/en-us/122718
https://support.apple.com/en-us/122721
http://seclists.org/fulldisclosure/2025/May/12
http://seclists.org/fulldisclosure/2025/May/9
http://seclists.org/fulldisclosure/2025/May/6

Impacted products

4 products

Vendor	Product	Version	CPE status
Apple	iOS and iPadOS	Affected: 0 , < 18.5 (custom)	guessed
Apple	iPadOS	Affected: 0 , < 17.7.7 (custom)	guessed
Apple	macOS	Affected: 0 , < 13.7.6 (custom) Affected: 0 , < 14.7.6 (custom) Affected: 0 , < 15.4 (custom)	guessed
Apple	visionOS	Affected: 0 , < 2.5 (custom)	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.1,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-30448",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-14T16:29:01.467979Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-862",
                "description": "CWE-862 Missing Authorization",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-14T16:30:02.707Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T19:47:15.907Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/May/12"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/May/9"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/May/6"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.5",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "14.7.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.5",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.4, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, visionOS 2.5. An attacker may be able to turn on sharing of an iCloud folder without authentication."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An attacker may be able to turn on sharing of an iCloud folder without authentication",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-02T18:12:16.440Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122373"
        },
        {
          "url": "https://support.apple.com/en-us/122404"
        },
        {
          "url": "https://support.apple.com/en-us/122405"
        },
        {
          "url": "https://support.apple.com/en-us/122717"
        },
        {
          "url": "https://support.apple.com/en-us/122718"
        },
        {
          "url": "https://support.apple.com/en-us/122721"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-30448",
    "datePublished": "2025-05-12T21:42:26.699Z",
    "dateReserved": "2025-03-22T00:04:43.719Z",
    "dateUpdated": "2026-04-02T18:12:16.440Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-30448",
      "date": "2026-09-20",
      "epss": "0.00974",
      "percentile": "0.6054"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "product": "iOS and iPadOS",
                "vendor": "Apple",
                "versions": [
                  {
                    "lessThan": "18.5",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "product": "iPadOS",
                "vendor": "Apple",
                "versions": [
                  {
                    "lessThan": "17.7.7",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "product": "macOS",
                "vendor": "Apple",
                "versions": [
                  {
                    "lessThan": "13.7.6",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  },
                  {
                    "lessThan": "14.7.6",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  },
                  {
                    "lessThan": "15.4",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "product": "visionOS",
                "vendor": "Apple",
                "versions": [
                  {
                    "lessThan": "2.5",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "source": "product-security@apple.com"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "683ECAF8-DB29-40DB-963A-B95EA2A2AC01",
                    "versionEndExcluding": "17.7.7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "069735D6-38B4-402A-9E79-1961701C9AD3",
                    "versionEndExcluding": "18.5",
                    "versionStartIncluding": "18.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AF6AAC00-F384-4B0D-BBA9-C2AD278BF653",
                    "versionEndExcluding": "18.5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A90AA958-60F3-474C-B351-0F143B498B3E",
                    "versionEndExcluding": "13.7.6",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0EE6D3FD-8A49-48CF-80A3-0FFC6BA80B99",
                    "versionEndExcluding": "14.7.6",
                    "versionStartIncluding": "14.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1320B815-0457-4276-83B9-AFAFDAF17EDA",
                    "versionEndExcluding": "15.4",
                    "versionStartIncluding": "15.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "047CDCCE-04BB-4D43-9831-7694992C5CC4",
                    "versionEndExcluding": "2.5",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.4, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, visionOS 2.5. An attacker may be able to turn on sharing of an iCloud folder without authentication."
          },
          {
            "lang": "es",
            "value": "Este problema se solucion\u00f3 con comprobaciones adicionales de derechos. Este problema est\u00e1 corregido en macOS Sonoma 14.7.6, iPadOS 17.7.7, iOS 18.5 y iPadOS 18.5, visionOS 2.5, macOS Ventura 13.7.6 y macOS Sequoia 15.4. Un atacante podr\u00eda activar el uso compartido de una carpeta de iCloud sin autenticaci\u00f3n."
          }
        ],
        "id": "CVE-2025-30448",
        "lastModified": "2026-06-17T09:08:45.447",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9.1,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 5.2,
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2025-30448",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "yes"
                  },
                  {
                    "technicalImpact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-14T16:29:01.467979Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2025-05-12T22:15:21.190",
        "references": [
          {
            "source": "product-security@apple.com",
            "tags": [
              "Release Notes",
              "Vendor Advisory"
            ],
            "url": "https://support.apple.com/en-us/122373"
          },
          {
            "source": "product-security@apple.com",
            "tags": [
              "Release Notes",
              "Vendor Advisory"
            ],
            "url": "https://support.apple.com/en-us/122404"
          },
          {
            "source": "product-security@apple.com",
            "tags": [
              "Release Notes",
              "Vendor Advisory"
            ],
            "url": "https://support.apple.com/en-us/122405"
          },
          {
            "source": "product-security@apple.com",
            "tags": [
              "Release Notes",
              "Vendor Advisory"
            ],
            "url": "https://support.apple.com/en-us/122717"
          },
          {
            "source": "product-security@apple.com",
            "tags": [
              "Release Notes",
              "Vendor Advisory"
            ],
            "url": "https://support.apple.com/en-us/122718"
          },
          {
            "source": "product-security@apple.com",
            "tags": [
              "Release Notes",
              "Vendor Advisory"
            ],
            "url": "https://support.apple.com/en-us/122721"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://seclists.org/fulldisclosure/2025/May/12"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://seclists.org/fulldisclosure/2025/May/6"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://seclists.org/fulldisclosure/2025/May/9"
          }
        ],
        "sourceIdentifier": "product-security@apple.com",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-862"
              }
            ],
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2026-04-02T23:04:34+00:00",
      "cve": "CVE-2025-30448",
      "id": "CVE-2025-30448",
      "initial_release_date": "2025-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CVE-2025-30448",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-30448.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2025-11-03T19:47:15.907Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "url": "http://seclists.org/fulldisclosure/2025/May/12"
              },
              {
                "url": "http://seclists.org/fulldisclosure/2025/May/9"
              },
              {
                "url": "http://seclists.org/fulldisclosure/2025/May/6"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "HIGH",
                  "baseScore": 9.1,
                  "baseSeverity": "CRITICAL",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "NONE",
                  "privilegesRequired": "NONE",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2025-30448",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2025-05-14T16:29:01.467979Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-862",
                    "description": "CWE-862 Missing Authorization",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2025-05-14T16:29:57.417Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "iOS and iPadOS",
              "vendor": "Apple",
              "versions": [
                {
                  "lessThan": "18.5",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "product": "iPadOS",
              "vendor": "Apple",
              "versions": [
                {
                  "lessThan": "17.7.7",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "product": "macOS",
              "vendor": "Apple",
              "versions": [
                {
                  "lessThan": "13.7.6",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                },
                {
                  "lessThan": "14.7.6",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                },
                {
                  "lessThan": "15.4",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "product": "visionOS",
              "vendor": "Apple",
              "versions": [
                {
                  "lessThan": "2.5",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.4, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, visionOS 2.5. An attacker may be able to turn on sharing of an iCloud folder without authentication."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "An attacker may be able to turn on sharing of an iCloud folder without authentication",
                  "lang": "en"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-04-02T18:12:16.440Z",
            "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
            "shortName": "apple"
          },
          "references": [
            {
              "url": "https://support.apple.com/en-us/122373"
            },
            {
              "url": "https://support.apple.com/en-us/122404"
            },
            {
              "url": "https://support.apple.com/en-us/122405"
            },
            {
              "url": "https://support.apple.com/en-us/122717"
            },
            {
              "url": "https://support.apple.com/en-us/122718"
            },
            {
              "url": "https://support.apple.com/en-us/122721"
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "assignerShortName": "apple",
        "cveId": "CVE-2025-30448",
        "datePublished": "2025-05-12T21:42:26.699Z",
        "dateReserved": "2025-03-22T00:04:43.719Z",
        "dateUpdated": "2026-04-02T18:12:16.440Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

CERTFR-2025-AVI-0393

Vulnerability from certfr_avis - Published: 2025-05-13 - Updated: 2025-05-13

De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.

Apple indique que la vulnérabilité CVE-2025-31200 est activement exploitée.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Apple	macOS	macOS Sonoma versions antérieures à 14.7.6
Apple	macOS	macOS Sequoia versions antérieures à 15.5
Apple	iPadOS	iPadOS versions 18.x antérieures à 18.5
Apple	N/A	watchOS versions antérieures à 11.5
Apple	Safari	Safari versions antérieures à 18.5
Apple	N/A	visionOS versions antérieures à 2.5
Apple	macOS	macOS Ventura versions antérieures à 13.7.6
Apple	iPadOS	iPadOS versions antérieures à 17.7.7
Apple	iOS	iOS versions antérieures à 18.5
Apple	N/A	tvOS versions antérieures à 18.5

References

Title

Publication Time

Tags

Bulletin de sécurité Apple 122404	2025-05-12	vendor-advisory
Bulletin de sécurité Apple 122717	2025-05-12	vendor-advisory
Bulletin de sécurité Apple 122405	2025-05-12	vendor-advisory
Bulletin de sécurité Apple 122716	2025-05-12	vendor-advisory
Bulletin de sécurité Apple 122718	2025-05-12	vendor-advisory
Bulletin de sécurité Apple 122721	2025-05-12	vendor-advisory
Bulletin de sécurité Apple 122720	2025-05-12	vendor-advisory
Bulletin de sécurité Apple 122719	2025-05-12	vendor-advisory
Bulletin de sécurité Apple 122722	2025-05-12	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "macOS Sonoma versions ant\u00e9rieures \u00e0 14.7.6",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Sequoia versions ant\u00e9rieures \u00e0 15.5",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iPadOS versions 18.x ant\u00e9rieures \u00e0 18.5",
      "product": {
        "name": "iPadOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "watchOS versions ant\u00e9rieures \u00e0 11.5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "Safari versions ant\u00e9rieures \u00e0 18.5",
      "product": {
        "name": "Safari",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "visionOS versions ant\u00e9rieures \u00e0 2.5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Ventura versions ant\u00e9rieures \u00e0 13.7.6",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iPadOS versions ant\u00e9rieures \u00e0 17.7.7",
      "product": {
        "name": "iPadOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iOS versions ant\u00e9rieures \u00e0 18.5",
      "product": {
        "name": "iOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "tvOS versions ant\u00e9rieures \u00e0 18.5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-31240",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31240"
    },
    {
      "name": "CVE-2025-31247",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31247"
    },
    {
      "name": "CVE-2025-26465",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-26465"
    },
    {
      "name": "CVE-2025-31221",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31221"
    },
    {
      "name": "CVE-2025-31209",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31209"
    },
    {
      "name": "CVE-2025-24155",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24155"
    },
    {
      "name": "CVE-2025-31204",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31204"
    },
    {
      "name": "CVE-2025-31227",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31227"
    },
    {
      "name": "CVE-2025-31218",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31218"
    },
    {
      "name": "CVE-2025-31228",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31228"
    },
    {
      "name": "CVE-2025-31226",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31226"
    },
    {
      "name": "CVE-2025-31212",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31212"
    },
    {
      "name": "CVE-2025-26466",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-26466"
    },
    {
      "name": "CVE-2025-31208",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31208"
    },
    {
      "name": "CVE-2024-8176",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-8176"
    },
    {
      "name": "CVE-2025-24144",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24144"
    },
    {
      "name": "CVE-2025-30440",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30440"
    },
    {
      "name": "CVE-2025-24142",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24142"
    },
    {
      "name": "CVE-2025-24225",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24225"
    },
    {
      "name": "CVE-2025-31219",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31219"
    },
    {
      "name": "CVE-2025-31251",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31251"
    },
    {
      "name": "CVE-2025-31217",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31217"
    },
    {
      "name": "CVE-2025-31241",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31241"
    },
    {
      "name": "CVE-2025-31196",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31196"
    },
    {
      "name": "CVE-2025-31234",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31234"
    },
    {
      "name": "CVE-2025-31245",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31245"
    },
    {
      "name": "CVE-2025-31220",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31220"
    },
    {
      "name": "CVE-2025-30442",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30442"
    },
    {
      "name": "CVE-2025-31235",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31235"
    },
    {
      "name": "CVE-2025-31200",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31200"
    },
    {
      "name": "CVE-2025-24097",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24097"
    },
    {
      "name": "CVE-2025-30448",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30448"
    },
    {
      "name": "CVE-2025-31249",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31249"
    },
    {
      "name": "CVE-2025-24274",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24274"
    },
    {
      "name": "CVE-2025-31238",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31238"
    },
    {
      "name": "CVE-2025-24220",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24220"
    },
    {
      "name": "CVE-2025-31210",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31210"
    },
    {
      "name": "CVE-2025-31207",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31207"
    },
    {
      "name": "CVE-2025-31242",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31242"
    },
    {
      "name": "CVE-2025-31206",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31206"
    },
    {
      "name": "CVE-2025-31244",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31244"
    },
    {
      "name": "CVE-2025-24259",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24259"
    },
    {
      "name": "CVE-2025-31259",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31259"
    },
    {
      "name": "CVE-2025-31232",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31232"
    },
    {
      "name": "CVE-2025-31250",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31250"
    },
    {
      "name": "CVE-2025-31223",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31223"
    },
    {
      "name": "CVE-2025-31224",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31224"
    },
    {
      "name": "CVE-2025-31214",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31214"
    },
    {
      "name": "CVE-2025-31246",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31246"
    },
    {
      "name": "CVE-2025-31213",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31213"
    },
    {
      "name": "CVE-2025-31256",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31256"
    },
    {
      "name": "CVE-2025-24258",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24258"
    },
    {
      "name": "CVE-2025-24111",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24111"
    },
    {
      "name": "CVE-2025-24222",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24222"
    },
    {
      "name": "CVE-2025-31225",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31225"
    },
    {
      "name": "CVE-2025-31205",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31205"
    },
    {
      "name": "CVE-2025-24223",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24223"
    },
    {
      "name": "CVE-2025-24213",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-24213"
    },
    {
      "name": "CVE-2025-31260",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31260"
    },
    {
      "name": "CVE-2025-31236",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31236"
    },
    {
      "name": "CVE-2025-31222",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31222"
    },
    {
      "name": "CVE-2025-31237",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31237"
    },
    {
      "name": "CVE-2025-31257",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31257"
    },
    {
      "name": "CVE-2025-31239",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31239"
    },
    {
      "name": "CVE-2025-31233",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31233"
    },
    {
      "name": "CVE-2025-30453",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30453"
    },
    {
      "name": "CVE-2025-31258",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31258"
    },
    {
      "name": "CVE-2025-31253",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31253"
    },
    {
      "name": "CVE-2025-31215",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-31215"
    },
    {
      "name": "CVE-2025-30443",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-30443"
    }
  ],
  "initial_release_date": "2025-05-13T00:00:00",
  "last_revision_date": "2025-05-13T00:00:00",
  "links": [],
  "reference": "CERTFR-2025-AVI-0393",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-05-13T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.\n\nApple indique que la vuln\u00e9rabilit\u00e9 CVE-2025-31200 est activement exploit\u00e9e.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
  "vendor_advisories": [
    {
      "published_at": "2025-05-12",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 122404",
      "url": "https://support.apple.com/en-us/122404"
    },
    {
      "published_at": "2025-05-12",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 122717",
      "url": "https://support.apple.com/en-us/122717"
    },
    {
      "published_at": "2025-05-12",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 122405",
      "url": "https://support.apple.com/en-us/122405"
    },
    {
      "published_at": "2025-05-12",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 122716",
      "url": "https://support.apple.com/en-us/122716"
    },
    {
      "published_at": "2025-05-12",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 122718",
      "url": "https://support.apple.com/en-us/122718"
    },
    {
      "published_at": "2025-05-12",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 122721",
      "url": "https://support.apple.com/en-us/122721"
    },
    {
      "published_at": "2025-05-12",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 122720",
      "url": "https://support.apple.com/en-us/122720"
    },
    {
      "published_at": "2025-05-12",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 122719",
      "url": "https://support.apple.com/en-us/122719"
    },
    {
      "published_at": "2025-05-12",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 122722",
      "url": "https://support.apple.com/en-us/122722"
    }
  ]
}

FKIE_CVE-2025-30448

Vulnerability from fkie_nvd - Published: 2025-05-12 22:15 - Updated: 2026-06-17 09:08

Severity

9.1 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Summary

References

URL	Tags
product-security@apple.com	https://support.apple.com/en-us/122373	Release Notes, Vendor Advisory
product-security@apple.com	https://support.apple.com/en-us/122404	Release Notes, Vendor Advisory
product-security@apple.com	https://support.apple.com/en-us/122405	Release Notes, Vendor Advisory
product-security@apple.com	https://support.apple.com/en-us/122717	Release Notes, Vendor Advisory
product-security@apple.com	https://support.apple.com/en-us/122718	Release Notes, Vendor Advisory
product-security@apple.com	https://support.apple.com/en-us/122721	Release Notes, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://seclists.org/fulldisclosure/2025/May/12
af854a3a-2127-422b-91ae-364da2661108	http://seclists.org/fulldisclosure/2025/May/6
af854a3a-2127-422b-91ae-364da2661108	http://seclists.org/fulldisclosure/2025/May/9

Impacted products

Vendor	Product	Version
apple	ipados	*
apple	ipados	*
apple	iphone_os	*
apple	macos	*
apple	macos	*
apple	macos	*
apple	visionos	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.5",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.7.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.7.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "14.7.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "15.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.5",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "product-security@apple.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "683ECAF8-DB29-40DB-963A-B95EA2A2AC01",
              "versionEndExcluding": "17.7.7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "069735D6-38B4-402A-9E79-1961701C9AD3",
              "versionEndExcluding": "18.5",
              "versionStartIncluding": "18.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "AF6AAC00-F384-4B0D-BBA9-C2AD278BF653",
              "versionEndExcluding": "18.5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A90AA958-60F3-474C-B351-0F143B498B3E",
              "versionEndExcluding": "13.7.6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0EE6D3FD-8A49-48CF-80A3-0FFC6BA80B99",
              "versionEndExcluding": "14.7.6",
              "versionStartIncluding": "14.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1320B815-0457-4276-83B9-AFAFDAF17EDA",
              "versionEndExcluding": "15.4",
              "versionStartIncluding": "15.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "047CDCCE-04BB-4D43-9831-7694992C5CC4",
              "versionEndExcluding": "2.5",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.4, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, visionOS 2.5. An attacker may be able to turn on sharing of an iCloud folder without authentication."
    },
    {
      "lang": "es",
      "value": "Este problema se solucion\u00f3 con comprobaciones adicionales de derechos. Este problema est\u00e1 corregido en macOS Sonoma 14.7.6, iPadOS 17.7.7, iOS 18.5 y iPadOS 18.5, visionOS 2.5, macOS Ventura 13.7.6 y macOS Sequoia 15.4. Un atacante podr\u00eda activar el uso compartido de una carpeta de iCloud sin autenticaci\u00f3n."
    }
  ],
  "id": "CVE-2025-30448",
  "lastModified": "2026-06-17T09:08:45.447",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.1,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.2,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-30448",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2025-05-14T16:29:01.467979Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2025-05-12T22:15:21.190",
  "references": [
    {
      "source": "product-security@apple.com",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/122373"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/122404"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/122405"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/122717"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/122718"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/122721"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://seclists.org/fulldisclosure/2025/May/12"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://seclists.org/fulldisclosure/2025/May/6"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://seclists.org/fulldisclosure/2025/May/9"
    }
  ],
  "sourceIdentifier": "product-security@apple.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-862"
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary"
    }
  ]
}

GHSA-422F-7VRG-37QX

Vulnerability from github – Published: 2025-05-13 00:31 – Updated: 2025-11-03 21:33

Details

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sonoma 14.7.6, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, visionOS 2.5, macOS Ventura 13.7.6, macOS Sequoia 15.4. An attacker may be able to turn on sharing of an iCloud folder without authentication.

Severity

9.1 (Critical)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-30448"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-862"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-05-12T22:15:21Z",
    "severity": "CRITICAL"
  },
  "details": "This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sonoma 14.7.6, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, visionOS 2.5, macOS Ventura 13.7.6, macOS Sequoia 15.4. An attacker may be able to turn on sharing of an iCloud folder without authentication.",
  "id": "GHSA-422f-7vrg-37qx",
  "modified": "2025-11-03T21:33:48Z",
  "published": "2025-05-13T00:31:13Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-30448"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/122373"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/122404"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/122405"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/122717"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/122718"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/122721"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/fulldisclosure/2025/May/12"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/fulldisclosure/2025/May/6"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/fulldisclosure/2025/May/9"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

NCSC-2025-0150

Vulnerability from csaf_ncscnl - Published: 2025-05-13 09:14 - Updated: 2025-05-13 09:14

Summary

Kwetsbaarheden verholpen in Apple iOS en iPadOS

Scope

43 vulnerabilities in this advisory, including CVE-2025-30448.

CVE-2025-30448

Known affected: 2 products

Open the full advisory

NCSC-2025-0151

Vulnerability from csaf_ncscnl - Published: 2025-05-13 09:19 - Updated: 2025-05-13 09:19

Summary

Kwetsbaarheden verholpen in Apple macOS

Scope

57 vulnerabilities in this advisory, including CVE-2025-30448.

CVE-2025-30448

Known affected: 3 products

Open the full advisory

WID-SEC-W-2025-1003

Vulnerability from csaf_certbund - Published: 2025-05-12 22:00 - Updated: 2025-11-23 23:00

Summary

Apple iOS und iPadOS: Mehrere Schwachstellen

Severity

Hoch

Scope

44 vulnerabilities in this advisory, including CVE-2025-30448.

CVE-2025-30448

Known affected: 3 products

Open the full advisory

WID-SEC-W-2025-1007

Vulnerability from csaf_certbund - Published: 2025-05-12 22:00 - Updated: 2025-11-23 23:00

Summary

Apple macOS: Mehrere Schwachstellen

Severity

Hoch

Scope

60 vulnerabilities in this advisory, including CVE-2025-30448.

CVE-2025-30448

Known affected: 3 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2025-30448 (GCVE-0-2025-30448)

CERTFR-2025-AVI-0393

Solutions

FKIE_CVE-2025-30448

GHSA-422F-7VRG-37QX

NCSC-2025-0150

NCSC-2025-0151

WID-SEC-W-2025-1003

WID-SEC-W-2025-1007

Tags

Sightings

Nomenclature

Related by attack behaviour