CVE-2025-30431

Analyzed Analyzed - Analysis Complete

Improper Access Control in macOS

Publication date: 2026-06-11

Last updated on: 2026-06-12

Assigner: Apple Inc.

Description

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app may be able to access private information.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-11

Last Modified

2026-06-12

Generated

2026-07-02

AI Q&A

2026-06-12

EPSS Evaluated

2026-06-30

NVD

CVE-2025-30431

EUVD

EUVD-2025-210121

Affected Vendors & Products

Vendor	Product	Version / Range
apple	macos	From 13.0 (inc) to 13.7.5 (exc)
apple	macos	From 14.0 (inc) to 14.7.5 (exc)
apple	macos	From 15.0 (inc) to 15.4 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-693	The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

Attack-Flow Graph

Impact Analysis

A malicious app exploiting this vulnerability may be able to access your private information without authorization, potentially leading to privacy breaches.

Executive Summary

This vulnerability allows a malicious application to access private information on affected macOS versions. The issue was addressed by implementing improved checks to prevent unauthorized access.

Mitigation Strategies

To mitigate this vulnerability, you should update your macOS system to one of the fixed versions: macOS Sequoia 15.4, macOS Sonoma 14.7.5, or macOS Ventura 13.7.5.

These updates include improved checks that address the issue and prevent a malicious app from accessing private information.

Compliance Impact

The vulnerability allows a malicious app to access private information, which could potentially lead to unauthorized disclosure of personal data.

Such unauthorized access to private information may impact compliance with data protection regulations like GDPR and HIPAA, which require safeguarding personal and sensitive data against unauthorized access.

However, the provided text does not explicitly discuss the impact of this vulnerability on compliance with these or other common standards and regulations.

Hi! I’m here to help you understand CVE-2025-30431. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70