CVE Watch—

CVE-2025-24085

Apple Multiple Products Use-After-Free Vulnerability

CVSS

—

No CVSS

EPSS

17.5%

p97

KEV

YES

Jan 29, 2025

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

17.5%EPSS · 30 days17.6%

2026-09-172026-10-15

KEV catalog record

Product

Apple / Multiple Products

Vulnerability

Apple Multiple Products Use-After-Free Vulnerability

Added to KEV

Jan 29, 2025

Remediate by

Feb 19, 2025

Known ransomware use

Summary description

Apple iOS, macOS, and other Apple products contain a user-after-free vulnerability that could allow a malicious application to elevate privileges.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://support.apple.com/en-us/122066 ; https://support.apple.com/en-us/122068 ; https://support.apple.com/en-us/122071 ; https://support.apple.com/en-us/122072 ; https://support.apple.com/en-us/122073 ; https://nvd.nist.gov/vuln/detail/CVE-2025-24085

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-869508.8 HIG

68.7%

KEV—71Apple Multiple Products Out-of-Bounds Write Vulnerability15d CVE-2025-435298.8 HIG

95.1%

KEV—79Apple Multiple Products Use-After-Free WebKit Vulnerability9d CVE-2025-435205.5 MED

35.3%

KEV—61Apple Multiple Products Classic Buffer Overflow Vulnerability9d CVE-2025-435107.8 HIG

27.6%

KEV—58Apple Multiple Products Improper Locking Vulnerability9d CVE-2023-430008.8 HIG

90.5%

KEV—77Apple Multiple products Use-After-Free Vulnerability25d CVE-2025-312778.8 HIG

75.4%

KEV—73Apple Multiple Products Buffer Overflow Vulnerability25d