CVEvulnerability
CVE-2025-31225
7.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2025-05-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
- Weaknesses
- CWE-200
Description
A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 18.5 and iPadOS 18.5. Call history from deleted apps may still appear in spotlight search results.
Affected configurations
• apple ipados (< 18.5)
• apple iphone os (< 18.5)
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- https://support.apple.com/en-us/122404 Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2025/May/5 seclists.org