Main Vulnerability Database Vulnerabilities #VU108972

#VU108972 Information disclosure in macOS - CVE-2025-31256

Published: May 12, 2025

Vulnerability identifier: #VU108972

Vulnerability risk: Low

CVSSv4.0: CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2025-31256

CWE-ID: CWE-200

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerable software:
macOS

Software vendor:
Apple Inc.

Description

The vulnerability allows an attacker to gain access to potentially sensitive information.

The vulnerability exists due to an error in Notes. An attacker with physical access to the system can observe user’s deleted notes via hot corner.

Install updates from vendor's website.