CVE-2025-46311CWE-451

CVE-2025-46311

High · published May 12, 2026

CVSS v3.1

7.5

EPSS

Percentile

13.1

In the wild

Unconfirmed

What it is

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2. An app may be able to access sensitive user data.

The record

Technical detail

CVSS v3.1: 7.5 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.00231 · 13.1th percentile
Weakness: CWE-451 · User Interface (UI) Misrepresentation of Critical Information
Published: 2026-05-12T22:16Z

Affected products (4)

Product	Versions	Fixed in
apple/ipados	< 18.7.3	18.7.3
apple/ipados	≥ 26.0, < 26.2	26.2
apple/iphone_os	< 18.7.3	18.7.3
apple/iphone_os	≥ 26.0, < 26.2	26.2

References (1)

https://support.apple.com/en-us/125884 · [email protected]

EPSS history

Timeline

12 MAY 17:35Z
An inconsistent user interface issue was addressed with improved state management
cvelistv5