CVE-2025-30434
CVSS 3.1 Score 5 of 10 (medium)
Details
Published Mar 31, 2025
Updated: Apr 7, 2025
CWE ID 79
Summary
CVE-2025-30434 is a vulnerability impacting iOS and iPadOS systems. The issue was resolved with enhanced input validation in the latest updates, iOS 18.4 and iPadOS 18.4. If exploited, a maliciously crafted file could trigger a cross-site scripting attack, potentially allowing an attacker to inject malicious code into a user's web session. This vulnerability could lead to unauthorized access or data theft. Users are strongly advised to install the latest software updates to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- iOS
- iPadOS
- Apple (iPhone OS)
Affected Vendors
- Apple