CVE-2025-46306
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2026-01-28

Last updated on: 2026-03-25

Assigner: Apple Inc.

Description
The issue was addressed with improved bounds checks. This issue is fixed in Keynote 15.1, iOS 26 and iPadOS 26, macOS Tahoe 26. Processing a maliciously crafted Keynote file may disclose memory contents.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-01-28
Last Modified
2026-03-25
Generated
2026-06-16
AI Q&A
2026-01-29
EPSS Evaluated
2026-06-14
NVD
CVE-2025-46306
EUVD
EUVD-2025-206471
Affected Vendors & Products
Showing 4 associated CPEs
Vendor Product Version / Range
apple keynote to 15.1 (exc)
apple ipados to 26.0 (exc)
apple iphone_os to 26.0 (exc)
apple macos to 26.0 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability involves improper bounds checks when processing Keynote files. A maliciously crafted Keynote file can cause the software to disclose memory contents, potentially exposing sensitive information. The issue has been fixed in macOS Tahoe 26, Keynote 15.1, iOS 26, and iPadOS 26.

Impact Analysis

If exploited, this vulnerability can lead to the disclosure of memory contents, which may include sensitive or confidential information. This could compromise the security and privacy of your data when opening malicious Keynote files.

Mitigation Strategies

To mitigate this vulnerability, update your devices to the fixed versions: macOS Tahoe 26, Keynote 15.1, iOS 26, or iPadOS 26. Avoid opening untrusted or suspicious Keynote files until the update is applied.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-46306. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart