AuthZ Leak via State Mgmt in iOS/iPadOS/macOS (pre-18.4/15.4)
CVE-2025-46308 Published on June 11, 2026
An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to leak sensitive user information.
Vulnerability Analysis
CVE-2025-46308 is exploitable with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality, a small impact on integrity and availability.
Weakness Type
What is an Authorization Vulnerability?
The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CVE-2025-46308 has been classified to as an Authorization vulnerability or weakness.
Products Associated with CVE-2025-46308
stack.watch emails you whenever new vulnerabilities are published in Apple Ios And Ipados or Apple macOS. Just hit a watch button to start following.
Affected Versions
Apple iOS and iPadOS:- Before 18.4 is affected.
- Before 15.4 is affected.