State Management Vulnerability in Apple Products
CVE-2025-30430
Currently unrated
Summary
A vulnerability in Apple's visionOS, iOS, iPadOS, and macOS products has been identified, related to password autofill functionality. Specifically, this issue may allow a user’s passwords to be automatically filled even after an authentication failure, posing a significant risk to user security. The issue has been addressed through improved state management to ensure that password autofill functionality behaves securely, preventing unauthorized access under incorrect authentication.
Affected Version(s)
iOS and iPadOS < 18.4
macOS < 15.4
visionOS < 2.4
References
Timeline
Vulnerability published
Vulnerability Reserved