CVE-2025-30456
CVSS Score
7.8
EPSS Score
0.0%
EPSS Percentile
0th
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to gain root privileges.
| Vendor | apple |
| Product | ios and ipados |
| Ecosystems | |
| Industries | Technology |
| Published | Mar 31, 2025 |
| Last Updated | Apr 2, 2026 |
Stay Ahead of the Next One
Get instant alerts for apple ios and ipados
Be the first to know when new high vulnerabilities affecting apple ios and ipados are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Apple / iOS and iPadOS
0 < 18.4
Apple / macOS
0 < 13.7.5 0 < 14.7.5 0 < 15.4
References
support.apple.com: https://support.apple.com/en-us/122371 support.apple.com: https://support.apple.com/en-us/122373 support.apple.com: https://support.apple.com/en-us/122374 support.apple.com: https://support.apple.com/en-us/122375 seclists.org: http://seclists.org/fulldisclosure/2025/Apr/10 seclists.org: http://seclists.org/fulldisclosure/2025/Apr/9 seclists.org: http://seclists.org/fulldisclosure/2025/Apr/8 seclists.org: http://seclists.org/fulldisclosure/2025/Apr/4