{"id":"CVE-2025-31184","aliases":["EUVD-2025-8887","GHSA-q844-h75g-f78q"],"status":"published","title":"This issue was addressed with improved permissions checking. This issue is fixed in Safari 18.4,...","description":"This issue was addressed with improved permissions checking. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4. An app may gain unauthorized access to Local Network.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00262,"percentile":0.18172,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-281"],"published":"2025-03-31T22:22:32Z","modified":"2026-06-17T09:09:58Z","products":[{"vendor":"apple","product":"ios and ipados"},{"vendor":"apple","product":"ipados"},{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"macos"},{"vendor":"apple","product":"safari"},{"vendor":"apple","product":"visionos"}],"references":[{"url":"https://support.apple.com/en-us/122371","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/en-us/122373","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/en-us/122378","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/en-us/122379","tags":["Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2025/Apr/8"},{"url":"http://seclists.org/fulldisclosure/2025/Apr/4"},{"url":"http://seclists.org/fulldisclosure/2025/Apr/12"},{"url":"http://seclists.org/fulldisclosure/2025/Apr/2"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31184"},{"url":"https://github.com/advisories/GHSA-q844-h75g-f78q"}],"sources":{"cve":[{"id":"CVE-2025-31184","description":"This issue was addressed with improved permissions checking. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4. An app may gain unauthorized access to Local Network.","status":"published","published":"2025-03-31T22:22:32.148Z","modified":"2026-04-02T18:08:41.383Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-281"],"updated_at":"2026-11-02T14:32:44.424933Z"}],"euvd":[{"id":"EUVD-2025-8887","description":"This issue was addressed with improved permissions checking. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4. An app may gain unauthorized access to Local Network.","status":"published","published":"2025-03-31T22:22:32Z","modified":"2026-04-02T18:08:41Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:25:22.116757Z"}],"ghsa":[{"id":"GHSA-q844-h75g-f78q","title":"This issue was addressed with improved permissions checking. This issue is fixed in Safari 18.4,...","description":"This issue was addressed with improved permissions checking. This issue is fixed in Safari 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may gain unauthorized access to Local Network.","status":"published","published":"2025-04-01T00:30:44Z","modified":"2025-11-04T00:32:26Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-281"],"updated_at":"2026-11-02T15:04:31.727217Z"}],"nvd":[{"id":"CVE-2025-31184","description":"This issue was addressed with improved permissions checking. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4. An app may gain unauthorized access to Local Network.","status":"published","published":"2025-03-31T23:15:28.847Z","modified":"2026-06-17T09:09:58.597Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-281"],"updated_at":"2026-11-02T14:10:57.134561Z"}]}}