CVE-2025-31207 — Sensitive Information Exposure in Apple IOS AND Ipados

CWE-200 — Sensitive Information Exposure4 documents4 sources
Severity
7.7HIGHNVD
EPSS
0.1%
top 69.61%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Apple IOS AND IpadosApple IpadosApple Iphone OS
Timeline
PublishedMay 12
Latest updateMay 13

Description

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5. An app may be able to enumerate a user's installed apps.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:HExploitability: 2.5 | Impact: 5.2

Affected Packages3 packages

▶NVDapple/ipados< 18.5
▶CVEListV5apple/ios_and_ipados< 18.5
▶NVDapple/iphone_os< 18.5

🔴Vulnerability Details

2
GHSA
GHSA-w97v-vj4h-46rv: A logic issue was addressed with improved checks↗2025-05-13
▶
CVEList
CVE-2025-31207: A logic issue was addressed with improved checks↗2025-05-12
▶

📋Vendor Advisories

1
Apple
CVE-2025-31207: iOS 18.5 and iPadOS 18.5↗2025-05-12
▶
CVE-2025-31207 — Sensitive Information Exposure | cvebase