PT-2025-37782 · Apple · Macos Tahoe+7

Csaba Fitzl

+1

·

Published

2025-09-15

·

Updated

2025-11-04

·

CVE-2025-31255

CVSS v2.0

10

Critical

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions iOS versions prior to 26 iPadOS versions prior to 26 tvOS versions prior to 26 watchOS versions prior to 26 macOS Sonoma versions prior to 14.8 macOS Sequoia versions prior to 15.7
Description An authorization issue exists due to errors in the authorization procedure and improper state management. Exploitation may allow a remote attacker to gain unauthorized access to sensitive user data. An application may be able to access sensitive user data.
Recommendations Update iOS to version 26 or later. Update iPadOS to version 26 or later. Update tvOS to version 26 or later. Update watchOS to version 26 or later. Update macOS Sonoma to version 14.8 or later. Update macOS Sequoia to version 15.7 or later.

Fix

Improper Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-285

Related Identifiers

BDU:2025-11289
CVE-2025-31255

Affected Products

Apple Macos
Ios
Ipados
Macos Sequoia
Macos Sonoma
Macos Tahoe
Tvos
Watchos