CVE-2025-31276

5.3 mediumEPSS 0.5%

Medium (5.3) in apple. EPSS 0.5% chance of exploitation in the next 30 days.

This issue was addressed through improved state management. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9. Remote content may be loaded even when the 'Load Remote Images' setting is turned off.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
CWE: CWE-359
Published: 2025-07-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apple:ipados
apple:iphone_os

References

https://support.apple.com/en-us/124147
https://support.apple.com/en-us/124148
http://seclists.org/fulldisclosure/2025/Jul/31

Check your stack JSON