iOS
CVE-2025-46292
MEDIUM
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Lifecycle Timeline
2DescriptionCVE.org
This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2. An app may be able to access user-sensitive data.
AnalysisAI
Local authenticated applications on iOS and iPadOS can access user-sensitive data due to insufficient entitlement checks, affecting iOS 18.7.2 and earlier and iPadOS 18.7.2 and earlier (as well as iOS 26.1 and iPadOS 26.1 and earlier). An attacker with app installation capability can exploit this vulnerability to bypass privacy controls and exfiltrate protected user information. No public exploit identified at time of analysis, though the 5.5 CVSS score and information disclosure classification indicate moderate real-world risk in targeted attack scenarios.
Technical ContextAI
This vulnerability stems from CWE-284 (Improper Access Control / Insufficient Authorization Checks), a fundamental access control weakness in Apple's iOS and iPadOS security model. The issue occurs when applications request sensitive user data-such as photos, contacts, location, or health information-that are normally protected by entitlements and runtime privacy prompts. The fix involves tightening entitlement validation logic within the OS kernel or core system frameworks, ensuring that applications cannot circumvent the declared capabilities defined in their code signing entitlements. CPE data confirms impact across both iPhone OS (iOS) and iPadOS product lines across multiple version branches, indicating this affects Apple's mobile platform's core authorization mechanism.
RemediationAI
Vendor-released patch: iOS 18.7.3, iPadOS 18.7.3, iOS 26.2, and iPadOS 26.2. Users should immediately apply the latest available iOS or iPadOS version via Settings > General > Software Update on their device. Organizations managing fleets of Apple devices should enforce automatic update policies to ensure timely deployment of this security patch. For environments where immediate patching is constrained, restrict installation of untrusted third-party applications and review installed app permissions in Privacy settings (Settings > Privacy). Refer to Apple security advisories at https://support.apple.com/en-us/125884 and https://support.apple.com/en-us/125885 for comprehensive patch details.
A use-after-free issue was addressed with improved memory management. Rated high severity (CVSS 8.8), this vulnerability
Apple's kernel across all platforms (iOS, macOS, watchOS, visionOS, tvOS) contains a memory corruption vulnerability (CV
A use-after-free issue was addressed with improved memory management. Rated high severity (CVSS 7.8), this vulnerability
The DLSw implementation in Cisco IOS does not initialize packet buffers, which allows remote attackers to obtain sensiti
The issue was addressed with improved checks. Rated high severity (CVSS 7.0). Actively exploited in the wild (cisa kev)
AirKeyboard iOS App 1.0.5 contains a missing authentication vulnerability that allows unauthenticated attackers to type
Mobile Security Framework (MobSF) is a security research platform for mobile applications in Android, iOS and Windows Mo
A vulnerability in the Cisco IOx application hosting environment of multiple Cisco platforms could allow an authenticate
Arbitrary code execution in Jellyfin iOS GitHub Actions workflow. CVSS 10.0.
Memory corruption vulnerabilities in Apple's graphics texture processing engine across iOS, iPadOS, macOS, tvOS, visionO
Buffer overflow memory corruption in Apple file parsing components allows remote code execution across iOS 18.6, iPadOS
A use-after-free issue was addressed with improved memory management. Rated critical severity (CVSS 9.8), this vulnerabi
Same weakness CWE-284 – Improper Access Control
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today