PT-2026-5165 · Apple · Apple Macos+3

Published 2025-09-15 · Updated 2026-01-28 · CVE-2025-46306

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Keynote versions prior to 15.1 iOS versions prior to 26 iPadOS versions prior to 26 macOS versions prior to Tahoe 26

Description Processing a maliciously crafted Keynote file may disclose memory contents due to insufficient bounds checks.

Recommendations Update Keynote to version 15.1 or later. Update iOS to version 26 or later. Update iPadOS to version 26 or later. Update macOS to Tahoe 26 or later.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2025-46306

Affected Products

Keynote

Apple Macos

Ios

Ipados

References · 9

• https://support.apple.com/en-us/125110 · Vendor Advisory
• https://support.apple.com/en-us/126254 · Vendor Advisory
• https://support.apple.com/en-us/125108 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-46306 · Security Note
• https://osv.dev/vulnerability/CVE-2025-46306 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46306 · Note
• https://twitter.com/CVEnew/status/2016571179415351441 · Twitter Post
• https://twitter.com/vuldb/status/2016599710057017571 · Twitter Post
• https://twitter.com/colemahoney/status/2016636580090331531 · Twitter Post