CVE-2025-46287

Published: Dec 12, 2025Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Exploitability: 3.9 / Impact: 2.5

Source: NVD

Description

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. An attacker may be able to spoof their FaceTime caller ID.

Affected (2)

Products: Apple: Macos

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Apple Macos	From 14.0 to 14.8.3
Apple Macos	From 15.0 to 15.7.3

Related CWEs

User Interface (UI) Misrepresentation of Critical Information

The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.

References (7)

https://support.apple.com/en-us/125884

Source: product-security@apple.com

https://support.apple.com/en-us/125885

Source: product-security@apple.com

https://support.apple.com/en-us/125886

Source: product-security@apple.com

https://support.apple.com/en-us/125887

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/125888

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/125890

Source: product-security@apple.com

https://support.apple.com/en-us/125891

Source: product-security@apple.com

Timeline

No history available yet.