CVE-2025-31192

The issue was addressed with improved checks. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A website may be able to access sensor information without user consent.

CVSS v3.1

6.7 MEDIUMCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L

EPSS

0.57% chance of exploitation in the next 30 days, 45th percentile

Published

2025-03-31

Updated

2026-04-02

Proof-of-concept exploits (1)

• cyborJ2708/POC

References

• CVE Record
• NVD entry

Related

• CVE-2025-43356
• CVE-2025-3119
• CVE-2025-3120
• CVE-2025-3118
• CVE-2025-31200
• CVE-2025-31161