CVE Watch—

CVE-2025-24200

Apple iOS and iPadOS Incorrect Authorization Vulnerability

CVSS

—

Sin CVSS

EPSS

4.4%

p91

KEV

SÍ

12 feb 2025

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

4.4%EPSS · 30 días4.5%

2026-09-172026-10-15

Ficha del catálogo KEV

Producto

Apple / iOS and iPadOS

Vulnerabilidad

Apple iOS and iPadOS Incorrect Authorization Vulnerability

Añadido a KEV

12 feb 2025

Remediar antes de

5 mar 2025

Uso conocido en ransomware

Descripción resumida

Apple iOS and iPadOS contains an incorrect authorization vulnerability that allows a physical attacker to disable USB Restricted Mode on a locked device.

Acción requerida

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://support.apple.com/en-us/122173 ; https://nvd.nist.gov/vuln/detail/CVE-2025-24200

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2021-30983—

86.8%

KEV—76Apple iOS and iPadOS Buffer Overflow Vulnerability—CVE-2023-41974—

79.9%

KEV—74Apple iOS and iPadOS Use-After-Free Vulnerability—CVE-2023-42824—

69.3%

KEV—71Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability—CVE-2022-42827—

63.8%

KEV—69Apple iOS and iPadOS Out-of-Bounds Write Vulnerability—