Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An integer overflow was addressed by adopting 64-bit timestamps. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. An app may be able to gain root privileges.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-04 | 2 | Disclosure1General1 |
| 2026-04-18 | 1 | General1 |
@hermes_tool1 You now can see the full details about CVE-2025-46285 from https://vulntracker.io/cves/CVE-2025-46285 FOR FREE
Post summary
The tweet merely directs users to a vulnerability tracker page for CVE-2025-46285, providing no further technical or actionable information.
الترجمة: "لدى iOS 26.1 مرشح لاستغلال جذري: CVE-2025-46285 لا يمكنه توفير تصحيح أخطاء النواة أو jailbreak، لكنه قد يكون مفيداً كخطوة أولى لتعزيز الرؤية في داخليات iOS، والبحث عن خطأ يمكنه ذلك." التفسير: هذا يشير إلى ثغرة أمنية (CVE-2025-46285) في iOS 26.1، تتعلق بتجاوز عددي في النواة يسمح لتطبيق بالحصول على صلاحيات جذرية. تم إصلاحها باستخدام تواقيت 64 بت. الثغرة متوفرة في أجهزة مثل iPhone 11 فما فوق وiPad محددة. ليست كافية للـjailbreak الكامل أو تصحيح النواة، لكنها قد تساعد في اكتشاف ثغرات أفضل للوصول إلى داخليات النظام. اكتشفها باحثون من Alibaba.
Post summary
CVE-2025-46285 is a numeric overflow in iOS 26.1’s kernel that allows an app to gain root privileges, but it does not enable a full jailbreak; the issue has been patched via 64‑bit signatures.
🚨 HIGH: CVE-2025-46285 (CVSS 7.8) Integer overflow in Apple products allows apps to gain root privileges. Fixed in iOS 18.7.3/26.2, macOS Sequoia 15.7.3, Sonoma 14.8.3, Tahoe 26.2, tvOS/visionOS/watchOS 26.2. Update immediately. #CVE #PatchNow https://t.co/WFks46jmBx
Stop assuming iOS patches itself. 400 million iPhones still running CVE-2025-46285 (kernel privilege escalation). Your app's sandbox? Gone. Keychain? Readable. Build defense layers that don't depend on users updating their phones. Pro is free for ... https://appaudix.com/blog/ios-zero-days-why-your-app-cant-trust-the-device https://t.co/oqhntCPpa8
Post summary
The post warns that 400 million iPhones still have the unpatched CVE-2025-46285 kernel privilege escalation, urging developers to design defenses independent of device updates.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | apple | macos | - | - | - |