CVE-2025-31220
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.5epss 0.2%
exploitation probability
0.2%top 89% of all CVEs
observed exploitation
nono source reports it
A privacy issue was addressed by removing sensitive data. This issue is fixed in iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6. A malicious app may be able to read sensitive location information.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
References
http://seclists.org/fulldisclosure/2025/May/6http://seclists.org/fulldisclosure/2025/May/7http://seclists.org/fulldisclosure/2025/May/8http://seclists.org/fulldisclosure/2025/May/9https://support.apple.com/en-us/122405https://support.apple.com/en-us/122716https://support.apple.com/en-us/122717https://support.apple.com/en-us/122718