CVEvulnerability
CVE-2025-31276
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2025-07-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-359
Description
This issue was addressed through improved state management. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9. Remote content may be loaded even when the 'Load Remote Images' setting is turned off.
Affected configurations
• apple ipados (< 17.7.9)
• apple ipados (>= 18.0 < 18.6)
• apple iphone os (< 18.6)
Related
Weakness · CWE (1)
- CWE-359 Exposure of Private Personal Information to an Unauthorized Actor weakness
References
- https://support.apple.com/en-us/124147 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/124148 Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2025/Jul/31 seclists.org