CVE-2025-30448
28Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 9.1epss 1.0%
probabilidad de explotación
1.0%top 39% de las CVE
explotación observada
noninguna fuente lo reporta
This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.4, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, visionOS 2.5. An attacker may be able to turn on sharing of an iCloud folder without authentication.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Referencias
http://seclists.org/fulldisclosure/2025/May/12http://seclists.org/fulldisclosure/2025/May/6http://seclists.org/fulldisclosure/2025/May/9https://support.apple.com/en-us/122373https://support.apple.com/en-us/122404https://support.apple.com/en-us/122405https://support.apple.com/en-us/122717https://support.apple.com/en-us/122718https://support.apple.com/en-us/122721