CVE-2025-24137 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	8 HIGH	ADJACENT_NETWORK	LOW	NONE	CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
apple	CNA	---				---
CISA-ADP	ADP	8 HIGH	ADJACENT_NETWORK	LOW	NONE	CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 26%

Vendor	Product	Version
apple	ipados	𝑥 < 17.7.4
apple	ipados	18.0 ≤ 𝑥 < 18.3
apple	iphone_os	𝑥 < 18.3
apple	macos	𝑥 < 14.7.3
apple	macos	15.0 ≤ 𝑥 < 15.3
apple	tvos	𝑥 < 18.3
apple	visionos	𝑥 < 2.3
apple	watchos	𝑥 < 11.3

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')
The program allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

Vulnerability Media Exposure

[GERMAN] Apple macOS, iPadOS und iOS: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Apple macOS, Apple iPadOS und Apple iOS ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, beliebigen Code auszuführen, sensible Daten offenzulegen, Dateien zu manipulieren, erhöhte Rechte zu erlangen - einschließlich Root-Rechte, Sicherheitsmaßnahmen zu umgehen und einen Spoofing-Angriff zu starten.
Published: 2025-01-27T23:00:00+00:00

References

https://support.apple.com/en-us/122066

https://support.apple.com/en-us/122067

https://support.apple.com/en-us/122068

https://support.apple.com/en-us/122069

https://support.apple.com/en-us/122071

https://support.apple.com/en-us/122072

https://support.apple.com/en-us/122073