VULNERABILITY INTELLIGENCE

CVE-2025-24085

CVSS score10 CRITICAL
EPSS probability17.51%
CISA KEVKnown exploited vulnerability
Published2025-01-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Known Exploited Vulnerability

Apple Multiple Products Use-After-Free Vulnerability

Vendor / product: Apple / Multiple Products

Description

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.3, visionOS 2.3, watchOS 11.3. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-416

Primary references