CVE-2025-31199

medium

Description

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPadOS 18.4, visionOS 2.4, macOS Sequoia 15.4. An app may be able to access sensitive user data.

References

References
More

https://www.securityweek.com/sploitlight-macos-vulnerability-leaks-sensitive-information/

https://securityaffairs.com/180503/hacking/microsoft-uncovers-macos-flaw-allowing-bypass-tcc-protections-and-exposing-sensitive-data.html

https://www.theregister.com/2025/07/28/microsoft_spots_apple_bug/

https://www.bleepingcomputer.com/news/security/microsoft-macos-sploitlight-flaw-leaks-apple-intelligence-data/

https://hackread.com/macos-sploitlight-flaw-apple-intelligence-cached-data/

https://support.apple.com/en-us/122378

https://support.apple.com/en-us/122373

https://support.apple.com/en-us/122371

Details

Source: Mitre, NVD

Published: 2025-05-29

Updated: 2025-06-02

Named Vulnerability: Sploitlight

Risk Information

CVSS v2

Base Score: 4.9

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N