CVE-2025-30426

This issue was addressed with additional entitlement checks

Critical · published March 31, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
68.2
In the wild
Unconfirmed
What it is

🔥 An app could peek into your digital life and list everything you've got installed, all thanks to this chilling vulnerability! 🚨 Think of it like a nosy neighbor who spies through your windows, cataloging everything in your home without you even realizing it. This vulnerability allows malicious apps to snoop around your device’s app list as if they had a master key to your personal space! If exploited, an attacker could gain insight into all the applications you use, potentially leading to targeted attacks or privacy breaches. This could be a disaster for your personal data, as it enables malicious actors to tailor their attacks based on your installed apps, leaving you vulnerable and exposed.

Put simply

Think of it like a nosy neighbor who spies through your windows, cataloging everything in your home without you even realizing it. This vulnerability allows malicious apps to snoop around your device’s app list as if they had a master key to your personal space! This vulnerability arises from inadequate entitlement checks, allowing an app to enumerate and access a list of installed applications on a device without proper authorization.

What to do

If exploited, an attacker could gain insight into all the applications you use, potentially leading to targeted attacks or privacy breaches. This could be a disaster for your personal data, as it enables malicious actors to tailor their attacks based on your installed apps, leaving you vulnerable and exposed. To protect yourself, update your devices to iOS 18.4, iPadOS 18.4, or macOS Sequoia 15.4 immediately. Also, ensure that all your devices are configured to limit app permissions, helping maintain your privacy. Don't forget to review installed apps for any suspicious behavior! You've got this! With these updates, you'll lock down your digital domain and keep those nosy neighbors at bay! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01211 · 68.2th percentile
Published
2025-03-31T22:23Z
EPSS history
Timeline
  • 31 MAR 22:23Z
    This issue was addressed with additional entitlement checks
    cvelistv5