CVE-2025-31279

CVSS 9.8 CRITICALEPSS 1.0%CWE-200

Vexday Risk Score

28Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 9.8EPSS 1.0%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

29 jul 2025Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A permissions issue was addressed with additional restrictions. This issue is fixed in iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to fingerprint the user.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Productos afectados

Apple · iPadOS Apple · macOS

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://seclists.org/fulldisclosure/2025/Jul/31 http://seclists.org/fulldisclosure/2025/Jul/32 http://seclists.org/fulldisclosure/2025/Jul/33 http://seclists.org/fulldisclosure/2025/Jul/34 https://support.apple.com/en-us/124148 https://support.apple.com/en-us/124149 https://support.apple.com/en-us/124150 https://support.apple.com/en-us/124151