PT-2025-51026 · Apple · Apple Macos

Riley Walzcurl · Published 2025-12-12 · Updated 2025-12-15 · CVE-2025-46287

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS versions prior to 14.8.3 macOS versions prior to 15.7.3

Description An issue with inconsistent user interface state management could allow an attacker to spoof their FaceTime caller ID. There are no reports of active exploits.

Recommendations Update to macOS version 14.8.3 or later. Update to macOS version 15.7.3 or later.

Fix

UI Misrepresentation of Critical Information

Weakness Enumeration

CWE-451

Related Identifiers

CVE-2025-46287

Affected Products

Apple Macos

References · 17

• https://osv.dev/vulnerability/CVE-2025-46287 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-46287 · Security Note
• https://support.apple.com/en-us/125888 · Vendor Advisory
• https://support.apple.com/en-us/125887 · Vendor Advisory
• https://support.apple.com/en-us/125890 · Note
• https://support.apple.com/en-us/125891 · Note
• https://twitter.com/CVEnew/status/1999865414655099040 · Twitter Post
• https://twitter.com/grok/status/2000638207956836490 · Twitter Post
• https://twitter.com/grok/status/2000588301661507918 · Twitter Post
• https://t.me/CVEtracker/39666 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1999670153814917420 · Twitter Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46287 · Note
• https://support.apple.com/en-us/125884 · Note
• https://twitter.com/transilienceai/status/1999683543082106941 · Twitter Post
• https://support.apple.com/en-us/125886 · Note