CVE-2025-30463

The issue was addressed with improved restriction of data container access. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data.
References
Link Resource
https://support.apple.com/en-us/122371 Release Notes Vendor Advisory
https://support.apple.com/en-us/122373 Release Notes Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

History

04 Apr 2025, 18:12

Type Values Removed Values Added
Summary
  • (es) El problema se solucionó mejorando la restricción del acceso al contenedor de datos. Este problema está corregido en iOS 18.4, iPadOS 18.4 y macOS Sequoia 15.4. Una aplicación podría acceder a datos confidenciales del usuario.
First Time Apple ipados
Apple macos
Apple iphone Os
Apple
References () https://support.apple.com/en-us/122371 - () https://support.apple.com/en-us/122371 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/122373 - () https://support.apple.com/en-us/122373 - Release Notes, Vendor Advisory
CPE cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

01 Apr 2025, 15:16

Type Values Removed Values Added
CWE CWE-200
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5

31 Mar 2025, 23:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-03-31 23:15

Updated : 2025-04-04 18:12


NVD link : CVE-2025-30463

Mitre link : CVE-2025-30463

CVE.ORG link : CVE-2025-30463


JSON object : View

Products Affected

apple

  • ipados
  • iphone_os
  • macos
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor