Sensitive Information Exposure in iOS and macOS Products by Apple
CVE-2025-24117

5.5MEDIUM

Key Information:

Vendor
Apple
Status
Visionos
Mac OS
iPad OS
Watch OS
Vendor
CVE Published:
27 January 2025

Summary

This vulnerability affects Apple's iOS and macOS products, where an application may exploit improper redaction of sensitive information, potentially allowing the app to fingerprint the user. This issue has been mitigated with updates in iPadOS 17.7.4, visionOS 2.3, iOS 18.3, iPadOS 18.3, macOS Sequoia 15.3, and watchOS 11.3, emphasizing the importance of regular software updates to protect against potential misuse.

Affected Version(s)

iOS and iPadOS < 18.3

iPadOS < 17.7

macOS < 15.3

References

https://support.apple.com/en-us/122073
https://support.apple.com/en-us/122068
https://support.apple.com/en-us/122067

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.