CVE-2025-31192

The issue was addressed with improved checks. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A website may be able to access sensor information without user consent.

Affected

Apple · Safari · iOS and iPadOS · macOS

CVSS v3.1 CNA

6.7 MEDIUMCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L

EPSS

0.58% chance of exploitation in the next 30 days, 47th percentile

Published

2025-03-31

Updated

2026-04-02

Proof-of-concept exploits (1)

• cyborJ2708/POC0★ · 2026-08-20

Security advisories

• https://support.apple.com/en-us/122371
• https://support.apple.com/en-us/122373
• https://support.apple.com/en-us/122379

References

• CVE Record
• NVD entry

Related

• CVE-2025-43356