Improper access control in macOS - CVE-2025-30439
Published: April 2, 2025 / Updated: April 2, 2025
Vulnerability identifier: #VU106398
CSH Severity: Low
CVSS v4: 2.4 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-30439
CWE-ID: CWE-284
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an attacker with physical access to the system to gain access to sensitive information.
The vulnerability exists due to improper access restrictions in Focus. An attacker with physical access to the system can view sensitive user information.
Affected software
macOS
visionOS
watchOS
Apple iOS
iPadOS
visionOS
watchOS
Apple iOS
iPadOS
How to mitigate CVE-2025-30439
Install update from vendor's website.
macOS - update to 15.4 24E248
visionOS - update to 2.4
watchOS - update to 11.4
Apple iOS - update to 18.4 22E240
iPadOS - update to 18.4 22E240
visionOS - update to 2.4
watchOS - update to 11.4
Apple iOS - update to 18.4 22E240
iPadOS - update to 18.4 22E240