HID Device Vulnerability in Apple macOS and iOS Products
CVE-2025-46301

5.7MEDIUM

Key Information:

Vendor: Apple
Status: iOS And iPad OS; Mac OS; TV OS; Visionos
Vendor: CVE Published:; 11 February 2026

What is CVE-2025-46301?

A vulnerability exists in macOS, iOS, and iPadOS that could be exploited by a malicious Human Interface Device (HID). When such a device is connected, it may lead to an unexpected crash of the affected processes, potentially compromising system stability and user experience. This issue has been addressed in the latest updates, which include improved bounds checks to enhance overall system security and protect against this type of exploit.

Affected Version(s)

iOS and iPadOS 0 < 18.7.5

iOS and iPadOS 0 < 26.2

macOS 0 < 14.8.4

References

https://support.apple.com/en-us/125884

https://support.apple.com/en-us/125886

https://support.apple.com/en-us/125889

CVSS V3.1

Score:

5.7

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Adjacent Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Feb 11, 2026
Vulnerability Reserved
Apr 22, 2025

CVE-2025-46301 Data

JSON