iOS CVE-2025-31279
CRITICALCVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
2DescriptionNVD
A permissions issue was addressed with additional restrictions. This issue is fixed in iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to fingerprint the user.
AnalysisAI
Applications on Apple operating systems can fingerprint users through a permissions flaw that bypasses privacy restrictions. Affects macOS Ventura 13.x, Sonoma 14.x, Sequoia 15.x, and iPadOS 17.x with patches released in versions 13.7.7, 14.7.7, 15.6, and 17.7.9 respectively. CVSS 9.8 critical severity contradicts the low EPSS score (0.07%, 22nd percentile) and information disclosure nature, suggesting scoring misalignment. No public exploit identified at time of analysis, but the low technical barrier (network accessible, no authentication required per CVSS vector) makes this concerning for privacy-focused environments despite the limited impact scope of user fingerprinting.
Technical ContextAI
This vulnerability stems from CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor) in Apple's operating system permission framework. The flaw allows applications to bypass intended restrictions on accessing system information that can uniquely identify users through device fingerprinting techniques. Fingerprinting typically involves collecting hardware identifiers, system configuration details, installed applications, or behavioral patterns that create a unique profile. The affected CPE strings confirm impact across Apple's desktop and tablet OS families: macOS Ventura (13.x branch), macOS Sonoma (14.x), macOS Sequoia (15.x), and iPadOS 17.x. Apple's fix involved implementing additional restrictions in the permissions subsystem to prevent unauthorized information access, suggesting the original permission checks were either incomplete or incorrectly enforced, allowing sandboxed applications to escape their intended privacy boundaries.
RemediationAI
Apple has released vendor-confirmed patches addressing this permissions issue across all affected platforms. Users should upgrade to iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, or macOS Ventura 13.7.7 depending on their platform version. Official security advisories are available at https://support.apple.com/en-us/124148 (Sequoia), https://support.apple.com/en-us/124149 (Sonoma), https://support.apple.com/en-us/124150 (Ventura), and https://support.apple.com/en-us/124151 (iPadOS). No workarounds are documented; patching is the sole remediation path. Organizations should prioritize these updates for devices in privacy-sensitive roles or those handling regulated data, though the low EPSS score suggests this can follow normal patch cycles rather than emergency deployment.
More from same product – last 7 days
SQL injection in Pimcore's CustomReportsBundle (versions ≤ 12.3.5) lets an authenticated user holding the reports_config
Arbitrary code execution in Docker Model Runner's vllm-metal inference backend on macOS allows any container on the Dock
Arbitrary code execution in Docker Desktop's Model Runner on macOS allows any container on the Docker network to escape
Local privilege escalation in Apple macOS allows a malicious app already running with low privileges to elevate to root
Local privilege escalation in Canonical Multipass for macOS before 1.16.3 allows a low-privileged local user to obtain r
Share
External POC / Exploit Code
Leaving vuln.today