Medium severity5.3NVD Advisory· Published Jun 11, 2026· Updated Oct 7, 2026

CVE-2025-46308

Description

An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to leak sensitive user information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apple Inc./Ipados2 versions
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <18.4
- (no CPE)range: before 18.4
Apple Inc./Iphone OS
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Range: <18.4
Apple Inc./macOS
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Range: <15.4
Apple Inc./macOS Sequoiallm-fuzzy
Range: before 15.4
Apple Inc./iOSllm-fuzzy
Range: before 18.4

Patches

Vulnerability mechanics

References

support.apple.com/en-us/122371nvdRelease NotesVendor Advisory
support.apple.com/en-us/122373nvdRelease NotesVendor Advisory

News mentions

Apple Ships macOS Sequoia 15.4 and SwiftNIO 2.100.0: 17 CVEs Patched Including Sandbox Escape and Request Smuggling
Vypr Intelligence · Jun 12, 2026
macOS Sequoia 15.4: Seven CVEs Patched, Including Sandbox Escape and Launch Constraint Bypass
Vypr Intelligence · Jun 11, 2026

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000