CVSS 3.1
10.0 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HCVE-2025-24085
Critical (10.0) in Apple Multiple Products. In CISA KEV since 2025-01-29. EPSS 18% chance of exploitation in the next 30 days.
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.3, visionOS 2.3, watchOS 11.3. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2.
Severity
- EPSS
- 18% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
- CISA KEV
- listed 2025-01-29, due 2025-02-19
- CWE
- CWE-416
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apple:ipados
- apple:iphone_os
- apple:macos
- apple:tvos
- apple:visionos
- apple:watchos