An information disclosure issue was addressed with improved privacy controls. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. An app may be able to access sensitive user data.

zetlyn/cve-nvd vulnerability cve CVE-2025-46276 cpe cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* known 2025-12-12

https://nvd.nist.gov/vuln/detail/CVE-2025-46276

Properties

cvss	5.5 receipt Source NVD Its words `5.5` Read by `field:cve.metrics.cvssMetricV31[].cvssData.baseScore` Said since 2026-10-02 12:00 UTC Last answered 2026-10-04 18:16 UTC Original open at the source What the source handed over { "cve": { "affected": [ { "affectedData": [ { "product": "iOS and iPadOS", "vendor": "Apple", "versions": [ { "lessThan": "18.7.3", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "26.2", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "product": "macOS", "vendor": "Apple", "versions": [ { "lessThan": "14.8.3", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "15.7.3", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "26.2", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "product": "visionOS", "vendor": "Apple", "versions": [ { "lessThan": "26.2", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "product": "watchOS", "vendor": "Apple", "versions": [ { "lessThan": "26.2", "status": "affected", "version": "0", "versionType": "custom" } ] } ], "source": "product-security@apple.com" } ], "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:apple:macos::::::::", "matchCriteriaId": "8E37DC2A-33E6-480B-8DFE-4F6558F0A895", "versionEndExcluding": "14.8.3", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:macos::::::::", "matchCriteriaId": "3428C860-E02D-4FE9-96F4-58EEAAB8321D", "versionEndExcluding": "15.7.3", "versionStartIncluding": "15.0", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "An information disclosure issue was addressed with improved privacy controls. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. An app may be able to access sensitive user data." }, { "lang": "es", "value": "Un problema de revelación de información se abordó con controles de privacidad mejorados. Este problema se solucionó en watchOS 26.2, macOS Sonoma 14.8.3, iOS 18.7.3 y iPadOS 18.7.3, iOS 26.2 y iPadOS 26.2, macOS Tahoe 26.2, macOS Sequoia 15.7.3, visionOS 26.2. Una aplicación podría acceder a datos sensibles del usuario." } ], "id": "CVE-2025-46276", "lastModified": "2026-09-30T20:10:00.247", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary" }, { "cvssData": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "exploitabilityScore": 1.8, "impactScore": 1.4, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary" } ], "ssvcV203": [ { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": { "id": "CVE-2025-46276", "options": [ { "exploitation": "none" }, { "automatable": "no" }, { "technicalImpact": "partial" } ], "role": "CISA Coordinator", "timestamp": "2025-12-15T20:40:08.212231Z", "version": "2.0.3" } } ] }, "published": "2025-12-12T21:15:57.770", "references": [ { "source": "product-security@apple.com", "url": "https://support.apple.com/en-us/125884" }, { "source": "product-security@apple.com", "url": "https://support.apple.com/en-us/125885" }, { "source": "product-security@apple.com", "url": "https://support.apple.com/en-us/125886" }, { "source": "product-security@apple.com", "tags": [ "Release Notes", "Vendor Advisory" ], "url": "https://support.apple.com/en-us/125887" }, { "source": "product-security@apple.com", "tags": [ "Release Notes", "Vendor Advisory" ], "url": "https://support.apple.com/en-us/125888" }, { "source": "product-security@apple.com", "url": "https://support.apple.com/en-us/125890" }, { "source": "product-security@apple.com", "url": "https://support.apple.com/en-us/125891" } ], "sourceIdentifier": "product-security@apple.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "NVD-CWE-noinfo" } ], "source": "nvd@nist.gov", "type": "Primary" } ] } }
product	iOS and iPadOS receipt Source NVD Its words `iOS and iPadOS` Read by `field:cve.affected[].affectedData[].product` Said since 2026-10-02 12:00 UTC Last answered 2026-10-04 18:16 UTC Original open at the source What the source handed over { "cve": { "affected": [ { "affectedData": [ { "product": "iOS and iPadOS", "vendor": "Apple", "versions": [ { "lessThan": "18.7.3", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "26.2", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "product": "macOS", "vendor": "Apple", "versions": [ { "lessThan": "14.8.3", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "15.7.3", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "26.2", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "product": "visionOS", "vendor": "Apple", "versions": [ { "lessThan": "26.2", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "product": "watchOS", "vendor": "Apple", "versions": [ { "lessThan": "26.2", "status": "affected", "version": "0", "versionType": "custom" } ] } ], "source": "product-security@apple.com" } ], "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:apple:macos::::::::", "matchCriteriaId": "8E37DC2A-33E6-480B-8DFE-4F6558F0A895", "versionEndExcluding": "14.8.3", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:macos::::::::", "matchCriteriaId": "3428C860-E02D-4FE9-96F4-58EEAAB8321D", "versionEndExcluding": "15.7.3", "versionStartIncluding": "15.0", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "An information disclosure issue was addressed with improved privacy controls. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. An app may be able to access sensitive user data." }, { "lang": "es", "value": "Un problema de revelación de información se abordó con controles de privacidad mejorados. Este problema se solucionó en watchOS 26.2, macOS Sonoma 14.8.3, iOS 18.7.3 y iPadOS 18.7.3, iOS 26.2 y iPadOS 26.2, macOS Tahoe 26.2, macOS Sequoia 15.7.3, visionOS 26.2. Una aplicación podría acceder a datos sensibles del usuario." } ], "id": "CVE-2025-46276", "lastModified": "2026-09-30T20:10:00.247", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary" }, { "cvssData": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "exploitabilityScore": 1.8, "impactScore": 1.4, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary" } ], "ssvcV203": [ { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": { "id": "CVE-2025-46276", "options": [ { "exploitation": "none" }, { "automatable": "no" }, { "technicalImpact": "partial" } ], "role": "CISA Coordinator", "timestamp": "2025-12-15T20:40:08.212231Z", "version": "2.0.3" } } ] }, "published": "2025-12-12T21:15:57.770", "references": [ { "source": "product-security@apple.com", "url": "https://support.apple.com/en-us/125884" }, { "source": "product-security@apple.com", "url": "https://support.apple.com/en-us/125885" }, { "source": "product-security@apple.com", "url": "https://support.apple.com/en-us/125886" }, { "source": "product-security@apple.com", "tags": [ "Release Notes", "Vendor Advisory" ], "url": "https://support.apple.com/en-us/125887" }, { "source": "product-security@apple.com", "tags": [ "Release Notes", "Vendor Advisory" ], "url": "https://support.apple.com/en-us/125888" }, { "source": "product-security@apple.com", "url": "https://support.apple.com/en-us/125890" }, { "source": "product-security@apple.com", "url": "https://support.apple.com/en-us/125891" } ], "sourceIdentifier": "product-security@apple.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "NVD-CWE-noinfo" } ], "source": "nvd@nist.gov", "type": "Primary" } ] } }
status	Modified receipt Source NVD Its words `Modified` Read by `field:cve.vulnStatus` Said since 2026-10-02 12:00 UTC Last answered 2026-10-04 18:16 UTC Original open at the source What the source handed over { "cve": { "affected": [ { "affectedData": [ { "product": "iOS and iPadOS", "vendor": "Apple", "versions": [ { "lessThan": "18.7.3", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "26.2", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "product": "macOS", "vendor": "Apple", "versions": [ { "lessThan": "14.8.3", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "15.7.3", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "26.2", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "product": "visionOS", "vendor": "Apple", "versions": [ { "lessThan": "26.2", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "product": "watchOS", "vendor": "Apple", "versions": [ { "lessThan": "26.2", "status": "affected", "version": "0", "versionType": "custom" } ] } ], "source": "product-security@apple.com" } ], "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:apple:macos::::::::", "matchCriteriaId": "8E37DC2A-33E6-480B-8DFE-4F6558F0A895", "versionEndExcluding": "14.8.3", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:macos::::::::", "matchCriteriaId": "3428C860-E02D-4FE9-96F4-58EEAAB8321D", "versionEndExcluding": "15.7.3", "versionStartIncluding": "15.0", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "An information disclosure issue was addressed with improved privacy controls. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. An app may be able to access sensitive user data." }, { "lang": "es", "value": "Un problema de revelación de información se abordó con controles de privacidad mejorados. Este problema se solucionó en watchOS 26.2, macOS Sonoma 14.8.3, iOS 18.7.3 y iPadOS 18.7.3, iOS 26.2 y iPadOS 26.2, macOS Tahoe 26.2, macOS Sequoia 15.7.3, visionOS 26.2. Una aplicación podría acceder a datos sensibles del usuario." } ], "id": "CVE-2025-46276", "lastModified": "2026-09-30T20:10:00.247", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary" }, { "cvssData": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "exploitabilityScore": 1.8, "impactScore": 1.4, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary" } ], "ssvcV203": [ { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": { "id": "CVE-2025-46276", "options": [ { "exploitation": "none" }, { "automatable": "no" }, { "technicalImpact": "partial" } ], "role": "CISA Coordinator", "timestamp": "2025-12-15T20:40:08.212231Z", "version": "2.0.3" } } ] }, "published": "2025-12-12T21:15:57.770", "references": [ { "source": "product-security@apple.com", "url": "https://support.apple.com/en-us/125884" }, { "source": "product-security@apple.com", "url": "https://support.apple.com/en-us/125885" }, { "source": "product-security@apple.com", "url": "https://support.apple.com/en-us/125886" }, { "source": "product-security@apple.com", "tags": [ "Release Notes", "Vendor Advisory" ], "url": "https://support.apple.com/en-us/125887" }, { "source": "product-security@apple.com", "tags": [ "Release Notes", "Vendor Advisory" ], "url": "https://support.apple.com/en-us/125888" }, { "source": "product-security@apple.com", "url": "https://support.apple.com/en-us/125890" }, { "source": "product-security@apple.com", "url": "https://support.apple.com/en-us/125891" } ], "sourceIdentifier": "product-security@apple.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "NVD-CWE-noinfo" } ], "source": "nvd@nist.gov", "type": "Primary" } ] } }
vendor	Apple receipt Source NVD Its words `Apple` Read by `field:cve.affected[].affectedData[].vendor` Said since 2026-10-02 12:00 UTC Last answered 2026-10-04 18:16 UTC Original open at the source What the source handed over { "cve": { "affected": [ { "affectedData": [ { "product": "iOS and iPadOS", "vendor": "Apple", "versions": [ { "lessThan": "18.7.3", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "26.2", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "product": "macOS", "vendor": "Apple", "versions": [ { "lessThan": "14.8.3", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "15.7.3", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "26.2", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "product": "visionOS", "vendor": "Apple", "versions": [ { "lessThan": "26.2", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "product": "watchOS", "vendor": "Apple", "versions": [ { "lessThan": "26.2", "status": "affected", "version": "0", "versionType": "custom" } ] } ], "source": "product-security@apple.com" } ], "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:apple:macos::::::::", "matchCriteriaId": "8E37DC2A-33E6-480B-8DFE-4F6558F0A895", "versionEndExcluding": "14.8.3", "vulnerable": true }, { "criteria": "cpe:2.3:o:apple:macos::::::::", "matchCriteriaId": "3428C860-E02D-4FE9-96F4-58EEAAB8321D", "versionEndExcluding": "15.7.3", "versionStartIncluding": "15.0", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "An information disclosure issue was addressed with improved privacy controls. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. An app may be able to access sensitive user data." }, { "lang": "es", "value": "Un problema de revelación de información se abordó con controles de privacidad mejorados. Este problema se solucionó en watchOS 26.2, macOS Sonoma 14.8.3, iOS 18.7.3 y iPadOS 18.7.3, iOS 26.2 y iPadOS 26.2, macOS Tahoe 26.2, macOS Sequoia 15.7.3, visionOS 26.2. Una aplicación podría acceder a datos sensibles del usuario." } ], "id": "CVE-2025-46276", "lastModified": "2026-09-30T20:10:00.247", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary" }, { "cvssData": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "exploitabilityScore": 1.8, "impactScore": 1.4, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary" } ], "ssvcV203": [ { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": { "id": "CVE-2025-46276", "options": [ { "exploitation": "none" }, { "automatable": "no" }, { "technicalImpact": "partial" } ], "role": "CISA Coordinator", "timestamp": "2025-12-15T20:40:08.212231Z", "version": "2.0.3" } } ] }, "published": "2025-12-12T21:15:57.770", "references": [ { "source": "product-security@apple.com", "url": "https://support.apple.com/en-us/125884" }, { "source": "product-security@apple.com", "url": "https://support.apple.com/en-us/125885" }, { "source": "product-security@apple.com", "url": "https://support.apple.com/en-us/125886" }, { "source": "product-security@apple.com", "tags": [ "Release Notes", "Vendor Advisory" ], "url": "https://support.apple.com/en-us/125887" }, { "source": "product-security@apple.com", "tags": [ "Release Notes", "Vendor Advisory" ], "url": "https://support.apple.com/en-us/125888" }, { "source": "product-security@apple.com", "url": "https://support.apple.com/en-us/125890" }, { "source": "product-security@apple.com", "url": "https://support.apple.com/en-us/125891" } ], "sourceIdentifier": "product-security@apple.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "NVD-CWE-noinfo" } ], "source": "nvd@nist.gov", "type": "Primary" } ] } }

Text

An information disclosure issue was addressed with improved privacy controls. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. An app may be able to access sensitive user data. Un problema de revelación de información se abordó con controles de privacidad mejorados. Este problema se solucionó en watchOS 26.2, macOS Sonoma 14.8.3, iOS 18.7.3 y iPadOS 18.7.3, iOS 26.2 y iPadOS 26.2, macOS Tahoe 26.2, macOS Sequoia 15.7.3, visionOS 26.2. Una aplicación podría acceder a datos sensibles del usuario.