State Management Vulnerability in Apple Products
CVE-2025-30430

Currently unrated

Key Information:

Vendor
Apple
Vendor
CVE Published:
31 March 2025

Summary

A vulnerability in Apple's visionOS, iOS, iPadOS, and macOS products has been identified, related to password autofill functionality. Specifically, this issue may allow a user’s passwords to be automatically filled even after an authentication failure, posing a significant risk to user security. The issue has been addressed through improved state management to ensure that password autofill functionality behaves securely, preventing unauthorized access under incorrect authentication.

Affected Version(s)

iOS and iPadOS < 18.4

macOS < 15.4

visionOS < 2.4

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.