PT-2025-37786 · Apple · Apple Macos

Shantanu Thakur · Published 2025-09-15 · Updated 2025-09-16 · CVE-2025-31271

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26

Description Improved state management addresses an issue where incoming FaceTime calls could appear or be accepted on a locked macOS device, even with lock screen notifications disabled.

Recommendations Update to macOS Tahoe 26.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2025-31271

Affected Products

Apple Macos

References · 6

• https://support.apple.com/en-us/125110 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-31271 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-31271 · Security Note
• http://seclists.org/fulldisclosure/2025/Sep/53 · Note
• https://twitter.com/CVEnew/status/1967819500947968299 · Twitter Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-31271 · Note