CVE-2025-31192: The issue was addressed with improved checks. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A website may be able to access…

PriorityP432medium6.7CVSS 3.1

AVNACHPRLUIRSUCHIHAL

EPSS

0.55%

42.5th percentile

The issue was addressed with improved checks. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A website may be able to access sensor information without user consent.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
apple	ios_18.4_and_ipados	—	—
apple	ios_and_ipados	< 18.4	18.4
apple	ipados	< 18.4	18.4
apple	iphone_os	< 18.4	18.4
apple	macos	< 15.4	15.4
apple	macos	>= 15.0 < 15.4	15.4
apple	macos_sequoia	—	—
apple	safari	< 18.4	18.4
apple	safari	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.