CVE-2025-24225

CVE-2025-24225 is an injection issue in Apple’s mail-processing path that arises from insufficient input validation, potentially enabling user-interface spoofing when processing an email. The vulnerability affects iPadOS/iOS versions as noted: iPadOS 18.5 and iOS 18.5 (and iPadOS 17.7.7 also list...

CVE-2025-24225

An injection issue was addressed with improved input validation. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7. Processing an email may lead to user interface spoofing...

CVE-2025-24225

An injection issue was addressed with improved input validation. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7. Processing an email may lead to user interface spoofing...

CVE-2025-31227

CVE-2025-31227 affects iOS and iPadOS, addressing a logic issue that could allow access to a deleted call recording when a device is physically accessed. Apple fixes are in iOS 18.5 and iPadOS 18.5, with mitigation via updated checks. The available documents confirm the vulnerability arises from ...

CVE-2025-31227

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5. An attacker with physical access to a device may be able to access a deleted call recording...

CVE-2025-31227

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5. An attacker with physical access to a device may be able to access a deleted call recording...

CVE-2025-30436

CVE-2025-30436 (Apple iOS/iPadOS) : On a locked device, an attacker may exploit Siri to enable Auto-Answer Calls due to insufficient restriction of options. The issue is fixed in iOS 18.4 and iPadOS 18.4. Affected user devices should update to 18.4 or later to remediate. The published description...

CVE-2025-30436

This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.4 and iPadOS 18.4. An attacker may be able to use Siri to enable Auto-Answer Calls...

CVE-2025-30436

This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.4 and iPadOS 18.4. An attacker may be able to use Siri to enable Auto-Answer Calls...

CVE-2025-31207

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5. An app may be able to enumerate a user's installed apps...

CVE-2025-31207

CVE-2025-31207 is an Apple logic issue affecting iOS and iPadOS where an app may enumerate a user’s installed apps. The connected documentation confirms the vulnerability and that it is addressed in iOS 18.5 and iPadOS 18.5 with “improved checks.” The NVD/Red Hat/NCSC entries repeat the same desc...

CVE-2025-31207

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5. An app may be able to enumerate a user's installed apps...

CVE-2025-31253

This issue was addressed through improved state management. This issue is fixed in iOS 18.5 and iPadOS 18.5. Muting the microphone during a FaceTime call may not result in audio being silenced...

CVE-2025-31253

CVE-2025-31253 affects FaceTime on Apple devices. Root cause: a state-management flaw caused muting the microphone during a FaceTime call to fail. Impact: microphone may not be silenced as intended during FaceTime. Mitigation: Apple ships fixes in iOS 18.5 and iPadOS 18.5, addressing the issue th...

CVE-2025-31253

This issue was addressed through improved state management. This issue is fixed in iOS 18.5 and iPadOS 18.5. Muting the microphone during a FaceTime call may not result in audio being silenced...

CVE-2025-31212

This issue was addressed through improved state management. This issue is fixed in watchOS 11.5, tvOS 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5. An app may be able to access sensitive user data...

CVE-2025-31228

The issue was addressed with improved authentication. This issue is fixed in iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5. An attacker with physical access to a device may be able to access notes from the lock screen...

CVE-2025-31245

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.7.6, tvOS 18.5, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, macOS Ventura 13.7.6. An app may be able to cause unexpected system termination...

CVE-2025-31228

CVE-2025-31228 affects Apple iOS/iPadOS; locked-device notes access via physical access vulnerability. Affected: iPadOS 17.7.7, iOS 18.5, iPadOS 18.5. Root cause: inadequate authentication allowed on the lock screen. Impact: attacker with physical access could read notes from the lock screen (hig...

CVE-2025-31228

The issue was addressed with improved authentication. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7. An attacker with physical access to a device may be able to access notes from the lock screen...