Critical severity9.1NVD Advisory· Published May 12, 2025· Updated Jun 17, 2026
CVE-2025-30448
CVE-2025-30448
Description
This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.4, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, visionOS 2.5. An attacker may be able to turn on sharing of an iCloud folder without authentication.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <17.7.7
- (no CPE)range: iPadOS 18.5, iPadOS 17.7.7
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*range: <2.5
- (no CPE)range: visionOS 2.5
- Range: macOS Sequoia 15.4
- Range: macOS Sonoma 14.7.6
- Range: macOS Ventura 13.7.6
- Range: iOS 18.5
Patches
Vulnerability mechanics
References
9- support.apple.com/en-us/122373nvdRelease NotesVendor Advisory
- support.apple.com/en-us/122404nvdRelease NotesVendor Advisory
- support.apple.com/en-us/122405nvdRelease NotesVendor Advisory
- support.apple.com/en-us/122717nvdRelease NotesVendor Advisory
- support.apple.com/en-us/122718nvdRelease NotesVendor Advisory
- support.apple.com/en-us/122721nvdRelease NotesVendor Advisory
- seclists.org/fulldisclosure/2025/May/12nvd
- seclists.org/fulldisclosure/2025/May/6nvd
- seclists.org/fulldisclosure/2025/May/9nvd
News mentions
0No linked articles in our index yet.