CVE-2025-46308

Analyzed Analyzed - Analysis Complete

Improper Authorization in iOS and macOS

Publication date: 2026-06-11

Last updated on: 2026-06-12

Assigner: Apple Inc.

Description

An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to leak sensitive user information.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-11

Last Modified

2026-06-12

Generated

2026-07-02

AI Q&A

2026-06-12

EPSS Evaluated

2026-06-30

NVD

CVE-2025-46308

EUVD

EUVD-2025-210110

Affected Vendors & Products

Vendor	Product	Version / Range
apple	ipados	to 18.4 (exc)
apple	iphone_os	to 18.4 (exc)
apple	macos	to 15.4 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Compliance Impact

This vulnerability involves an authorization issue that may allow an app to leak sensitive user information. Such leakage of sensitive data can potentially impact compliance with data protection regulations like GDPR and HIPAA, which require strict controls over personal and sensitive information to prevent unauthorized disclosure.

By addressing this issue with improved state management in iOS 18.4, iPadOS 18.4, and macOS Sequoia 15.4, Apple reduces the risk of unauthorized data exposure, thereby helping to maintain compliance with these standards.

Impact Analysis

The vulnerability can lead to leakage of sensitive user information by an app, which may compromise user privacy and security. Since the issue involves authorization and state management, unauthorized access to certain data could occur without user consent.

Executive Summary

This vulnerability is an authorization issue related to state management in Apple operating systems. It was fixed in iOS 18.4, iPadOS 18.4, and macOS Sequoia 15.4. Due to this issue, an application may be able to leak sensitive user information.

Mitigation Strategies

To mitigate this vulnerability, update your Apple devices to the fixed versions: iOS 18.4, iPadOS 18.4, or macOS Sequoia 15.4 as applicable.

These updates address the authorization issue through improved state management, preventing apps from leaking sensitive user information.

Hi! I’m here to help you understand CVE-2025-46308. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70