CVE Vulnerabilities

CVE-2025-46288

Published: Dec 17, 2025 | Modified: Dec 18, 2025
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

A permissions issue was addressed with additional restrictions. This issue is fixed in visionOS 26.2, iOS 26.2 and iPadOS 26.2, watchOS 26.2, macOS Tahoe 26.2. An app may be able to access sensitive payment tokens.

Affected Software

NameVendorStart VersionEnd Version
IpadosApple*26.2 (excluding)
Iphone_osApple*26.2 (excluding)
MacosApple*26.2 (excluding)
VisionosApple*26.2 (excluding)
WatchosApple*26.2 (excluding)

References