CVE-2025-30448

Details

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sonoma 14.7.6, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, visionOS 2.5, macOS Ventura 13.7.6, macOS Sequoia 15.4. An attacker may be able to turn on sharing of an iCloud folder without authentication.

Affected Packages

macOS:14macOS

Fixed in:

14.7.6

macOS:15macOS

Fixed in:

15.4

References

WEBhttp://seclists.org/fulldisclosure/2025/May/12 WEBhttp://seclists.org/fulldisclosure/2025/May/6 WEBhttp://seclists.org/fulldisclosure/2025/May/9 WEBhttps://support.apple.com/en-us/122373 WEBhttps://support.apple.com/en-us/122404 WEBhttps://support.apple.com/en-us/122405 WEBhttps://support.apple.com/en-us/122717 WEBhttps://support.apple.com/en-us/122718 WEBhttps://support.apple.com/en-us/122721 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-30448

CVE-2025-30448

Details

Affected Packages

References

CVSS Analysis

Ecosystems

Timeline