Description Preview
This vulnerability, identified as CVE-2025-30439, affects unspecified versions of Apple's iOS, iPadOS, macOS, and visionOS that are less than 18.4, 15.4, and 2.4 respectively. The vulnerability allows an attacker with physical access to a locked device to potentially view sensitive user information. The issue has been addressed with improved checks and has been fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. The vulnerability has a CVSS v3.1 base score of 4.6, indicating a medium severity level.
Overview
The vulnerability is categorized under CWE-200, which refers to the exposure of sensitive information to an unauthorized actor. The attack vector is physical, meaning the attacker needs to have physical access to the device to exploit the vulnerability. The attack complexity is low, and no user interaction is required for the exploit. The confidentiality impact is high, but there is no impact on integrity and availability.
Remediation
Apple has addressed this issue with improved checks and has released updates to fix the vulnerability. Users are advised to update their devices to visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4.
References
For more information, please refer to the following links:
Industry ExposureMost to leastThis section illustrates the prevalence of a specific Common Vulnerabilities and Exposures (CVE) across various industries based on customer reports. The ranking displays industries from the most to least affected by this particular vulnerability, offering valuable insight into where this CVE has been most frequently observed. This information can help organizations within these sectors prioritize their security efforts, understand their relative risk exposure compared to their peers, and focus remediation strategies where they are most needed. By understanding the industry-specific impact, organizations can make more informed decisions regarding patching, resource allocation, and overall risk management related to this CVE.
This section illustrates the prevalence of a specific Common Vulnerabilities and Exposures (CVE) across various industries based on customer reports. The ranking displays industries from the most to least affected by this particular vulnerability, offering valuable insight into where this CVE has been most frequently observed. This information can help organizations within these sectors prioritize their security efforts, understand their relative risk exposure compared to their peers, and focus remediation strategies where they are most needed. By understanding the industry-specific impact, organizations can make more informed decisions regarding patching, resource allocation, and overall risk management related to this CVE.
- ManufacturingManufacturing
- Health Care & Social AssistanceHealth Care & Social Assistance
- Finance and InsuranceFinance and Insurance
- Public AdministrationPublic Administration
- Educational ServicesEducational Services
- Professional, Scientific, & Technical ServicesProfessional, Scientific, & Technical Services
- Transportation & WarehousingTransportation & Warehousing
- Retail TradeRetail Trade
- Arts, Entertainment & RecreationArts, Entertainment & Recreation
- Other Services (except Public Administration)Other Services (except Public Administration)
- InformationInformation
- Management of Companies & EnterprisesManagement of Companies & Enterprises
- UtilitiesUtilities
- Accommodation & Food ServicesAccommodation & Food Services
- Agriculture, Forestry Fishing & HuntingAgriculture, Forestry Fishing & Hunting
- MiningMining
- Real Estate Rental & LeasingReal Estate Rental & Leasing
- Wholesale TradeWholesale Trade
- Administrative, Support, Waste Management & Remediation ServicesAdministrative, Support, Waste Management & Remediation Services
- ConstructionConstruction
