{"id":"CVE-2025-31276","aliases":["EUVD-2025-23070","GHSA-vw7m-xrvg-cm67"],"status":"published","title":"This issue was addressed through improved state management. This issue is fixed in iOS 18.6 and...","description":"This issue was addressed through improved state management. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9. Remote content may be loaded even when the 'Load Remote Images' setting is turned off.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00486,"percentile":0.42205,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-359"],"published":"2025-07-29T23:35:57Z","modified":"2026-06-17T09:10:12Z","products":[{"vendor":"apple","product":"ios and ipados"},{"vendor":"apple","product":"ipados"},{"vendor":"apple","product":"iphone_os"}],"references":[{"url":"https://support.apple.com/en-us/124147","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/124148","tags":["Release Notes","Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2025/Jul/31"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31276"},{"url":"https://github.com/advisories/GHSA-vw7m-xrvg-cm67"}],"sources":{"cve":[{"id":"CVE-2025-31276","description":"This issue was addressed through improved state management. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9. Remote content may be loaded even when the 'Load Remote Images' setting is turned off.","status":"published","published":"2025-07-29T23:35:57.153Z","modified":"2026-04-02T18:22:50.34Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-359"],"updated_at":"2026-11-02T14:32:44.763463Z"}],"euvd":[{"id":"EUVD-2025-23070","description":"This issue was addressed through improved state management. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9. Remote content may be loaded even when the 'Load Remote Images' setting is turned off.","status":"published","published":"2025-07-29T23:35:57Z","modified":"2026-04-02T18:22:50Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T19:25:18.730372Z"}],"ghsa":[{"id":"GHSA-vw7m-xrvg-cm67","title":"This issue was addressed through improved state management. This issue is fixed in iOS 18.6 and...","description":"This issue was addressed through improved state management. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9. Remote content may be loaded even when the 'Load Remote Images' setting is turned off.","status":"published","published":"2025-07-30T00:32:20Z","modified":"2025-11-03T21:35:18Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-359"],"updated_at":"2026-11-02T15:04:25.4654Z"}],"nvd":[{"id":"CVE-2025-31276","description":"This issue was addressed through improved state management. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9. Remote content may be loaded even when the 'Load Remote Images' setting is turned off.","status":"published","published":"2025-07-30T00:15:30.72Z","modified":"2026-06-17T09:10:12.92Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-359"],"updated_at":"2026-11-02T14:11:21.71471Z"}]}}