CVE-2025-24144

EUVD-2025-14863
An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.7, macOS Sequoia 15.3, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.3, visionOS 2.3, watchOS 11.3. An app may be able to leak sensitive kernel state.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
appleipados
𝑥
< 17.7.7
appleipados
18.0 ≤
𝑥
< 18.3
appleiphone_os
𝑥
< 18.3
applemacos
𝑥
< 13.7.6
applemacos
14.0 ≤
𝑥
< 14.7.6
applemacos
15.0 ≤
𝑥
< 15.3
appletvos
𝑥
< 18.3
applevisionos
𝑥
< 2.3
applewatchos
𝑥
< 11.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://support.apple.com/en-us/122066
https://support.apple.com/en-us/122068
https://support.apple.com/en-us/122071
https://support.apple.com/en-us/122072
https://support.apple.com/en-us/122073
https://support.apple.com/en-us/122405
https://support.apple.com/en-us/122717
https://support.apple.com/en-us/122718
http://seclists.org/fulldisclosure/2025/May/6
http://seclists.org/fulldisclosure/2025/May/8
http://seclists.org/fulldisclosure/2025/May/9