{"id":"CVE-2025-31222","state":"PUBLISHED","title":"A correctness issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, v","description":"A correctness issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. A user may be able to elevate privileges.","publishedAt":"2025-05-12T21:42:24.325Z","updatedAt":"2026-04-02T18:11:12.985Z","severity":{"score":7.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","source":"CISA-ADP"},"assigner":"apple","products":["Apple iOS and iPadOS","Apple macOS","Apple tvOS","Apple visionOS","Apple watchOS"],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"version":"0","status":"affected","lessThan":"18.5","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"version":"0","status":"affected","lessThan":"13.7.6","versionType":"custom"},{"version":"0","status":"affected","lessThan":"14.7.6","versionType":"custom"},{"version":"0","status":"affected","lessThan":"15.5","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"version":"0","status":"affected","lessThan":"18.5","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"version":"0","status":"affected","lessThan":"2.5","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"version":"0","status":"affected","lessThan":"11.5","versionType":"custom"}]}],"references":["https://support.apple.com/en-us/122404","https://support.apple.com/en-us/122716","https://support.apple.com/en-us/122717","https://support.apple.com/en-us/122718","https://support.apple.com/en-us/122720","https://support.apple.com/en-us/122721","https://support.apple.com/en-us/122722","http://seclists.org/fulldisclosure/2025/May/12","http://seclists.org/fulldisclosure/2025/May/10","http://seclists.org/fulldisclosure/2025/May/9","http://seclists.org/fulldisclosure/2025/May/8","http://seclists.org/fulldisclosure/2025/May/7","http://seclists.org/fulldisclosure/2025/May/5"],"weaknesses":["CWE-269"],"ingestedAt":"2026-10-29T20:08:55.257Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/31xxx/CVE-2025-31222.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-31222","state":"PUBLISHED","datePublished":"2025-05-12T21:42:24.325Z","dateUpdated":"2026-04-02T18:11:12.985Z","assignerShortName":"apple","assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateReserved":"2025-03-27T16:13:58.319Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A correctness issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. A user may be able to elevate privileges."}],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"version":"0","status":"affected","lessThan":"18.5","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"version":"0","status":"affected","lessThan":"13.7.6","versionType":"custom"},{"version":"0","status":"affected","lessThan":"14.7.6","versionType":"custom"},{"version":"0","status":"affected","lessThan":"15.5","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"version":"0","status":"affected","lessThan":"18.5","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"version":"0","status":"affected","lessThan":"2.5","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"version":"0","status":"affected","lessThan":"11.5","versionType":"custom"}]}],"references":[{"url":"https://support.apple.com/en-us/122404"},{"url":"https://support.apple.com/en-us/122716"},{"url":"https://support.apple.com/en-us/122717"},{"url":"https://support.apple.com/en-us/122718"},{"url":"https://support.apple.com/en-us/122720"},{"url":"https://support.apple.com/en-us/122721"},{"url":"https://support.apple.com/en-us/122722"}],"problemTypes":[{"descriptions":[{"lang":"en","description":"A user may be able to elevate privileges"}]}],"providerMetadata":{"shortName":"apple","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateUpdated":"2026-04-02T18:11:12.985Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2025-31222","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-05-14T04:01:08.285278Z"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-269","lang":"en","type":"CWE","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-02-26T18:28:38.658Z"}},{"title":"CVE Program Container","references":[{"url":"http://seclists.org/fulldisclosure/2025/May/12"},{"url":"http://seclists.org/fulldisclosure/2025/May/10"},{"url":"http://seclists.org/fulldisclosure/2025/May/9"},{"url":"http://seclists.org/fulldisclosure/2025/May/8"},{"url":"http://seclists.org/fulldisclosure/2025/May/7"},{"url":"http://seclists.org/fulldisclosure/2025/May/5"}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2025-11-03T19:50:15.529Z"}}]}}}