CVE-2025-46287

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in watchOS 26.2, macOS Sonoma 14.8.3, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, macOS Sequoia 15.7.3, visionOS 26.2. An attacker may be able to spoof their FaceTime caller ID.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

History

17 Dec 2025, 21:16

Type Values Removed Values Added
Summary (en) An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.8.3, macOS Sequoia 15.7.3. An attacker may be able to spoof their FaceTime caller ID. (en) An inconsistent user interface issue was addressed with improved state management. This issue is fixed in watchOS 26.2, macOS Sonoma 14.8.3, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, macOS Sequoia 15.7.3, visionOS 26.2. An attacker may be able to spoof their FaceTime caller ID.
References
  • () https://support.apple.com/en-us/125884 -
  • () https://support.apple.com/en-us/125885 -
  • () https://support.apple.com/en-us/125886 -
  • () https://support.apple.com/en-us/125890 -
  • () https://support.apple.com/en-us/125891 -

17 Dec 2025, 19:16

Type Values Removed Values Added
CWE CWE-451

16 Dec 2025, 18:38

Type Values Removed Values Added
CPE cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
References () https://support.apple.com/en-us/125887 - () https://support.apple.com/en-us/125887 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/125888 - () https://support.apple.com/en-us/125888 - Release Notes, Vendor Advisory
First Time Apple macos
Apple
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 6.5
CWE NVD-CWE-noinfo

12 Dec 2025, 21:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-12-12 21:15

Updated : 2025-12-17 21:16


NVD link : CVE-2025-46287

Mitre link : CVE-2025-46287

CVE.ORG link : CVE-2025-46287


JSON object : View

Products Affected

apple

  • macos
CWE
NVD-CWE-noinfo CWE-451

User Interface (UI) Misrepresentation of Critical Information