CVE Watch—

CVE-2025-24200

Apple iOS and iPadOS Incorrect Authorization Vulnerability

CVSS

—

Sem CVSS

EPSS

4.5%

p91

KEV

SIM

12 de fev. de 2025

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

4.4%EPSS · 30 dias4.5%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Apple / iOS and iPadOS

Vulnerabilidade

Apple iOS and iPadOS Incorrect Authorization Vulnerability

Adicionado ao KEV

12 de fev. de 2025

Corrigir até

5 de mar. de 2025

Uso conhecido em ransomware

Não

Descrição resumida

Apple iOS and iPadOS contains an incorrect authorization vulnerability that allows a physical attacker to disable USB Restricted Mode on a locked device.

Ação necessária

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://support.apple.com/en-us/122173 ; https://nvd.nist.gov/vuln/detail/CVE-2025-24200

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2021-30983—

87.1%

KEV—76Apple iOS and iPadOS Buffer Overflow Vulnerability—CVE-2023-41974—

80.3%

KEV—74Apple iOS and iPadOS Use-After-Free Vulnerability—CVE-2022-42827—

64.7%

KEV—69Apple iOS and iPadOS Out-of-Bounds Write Vulnerability—CVE-2023-42824—

62.0%

KEV—69Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability—