CVE-2025-24201

CRITICAL CISA KEV EPSS 89.8%

Published Mar 11, 20251y ago · Modified Jun 17, 20261w ago

10.0 CVSS 3.1

Critical

Find Similar

Published Mar 11, 2025 1y ago

Last Modified Jun 17, 2026 1w ago

KEV Listed Mar 13, 2025 1y ago

KEV Due Apr 3, 2025 453d overdue

Description

An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.2 and iPadOS 18.3.2, iPadOS 17.7.6, macOS Sequoia 15.3.2, visionOS 2.3.2, watchOS 11.4. Maliciously crafted web content may be able to break out of Web Content sandbox. This is a supplementary fix for an attack that was blocked in iOS 17.2. (Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.).

CVSS Details

Base Score

10.0

Exploitability

3.9

Impact

6.0

Vector string

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector Network

Attack Complexity Low

Privileges Required None

User Interaction None

Scope Changed

Confidentiality High

Integrity High

Availability High

Threat Intelligence

CISA Known Exploited Overdue 453d

Added: Mar 13, 2025
Due: Apr 3, 2025

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

EPSS Exploit Probability

89.8% percentile

Exploit & Patch Status

Actively Exploited (KEV)

No Patch Available

Weaknesses 1

CWE-787 Out-of-bounds Write Memory Safety

Affected Products 12

Vendor	Product	Version	Range
apple	safari	*	<18.3.1
apple	macos	*	≥15.0 – <15.3.2
apple	visionos	*	<2.3.2
apple	watchos	*	<11.4
apple	ipados	*	≥15.8 – <15.8.4
apple	ipados	*	≥16.7 – <16.7.11
apple	ipados	*	≥17.0 – <17.7.6
apple	ipados	*	≥18.0 – <18.3.2
apple	iphone_os	*	≥15.8 – <15.8.4
apple	iphone_os	*	≥16.7 – <16.7.11
apple	iphone_os	*	≥17.0 – <18.3.2
debian	debian_linux	11.0	any

References 21

seclists.org http://seclists.org/fulldisclosure/2025/Apr/16

Mailing ListThird Party Advisory
seclists.org http://seclists.org/fulldisclosure/2025/Apr/7

Mailing ListThird Party Advisory
seclists.org http://seclists.org/fulldisclosure/2025/Jun/19

Mailing ListThird Party Advisory
seclists.org http://seclists.org/fulldisclosure/2025/Mar/2

Mailing ListThird Party Advisory
seclists.org http://seclists.org/fulldisclosure/2025/Mar/3

Mailing ListThird Party Advisory
seclists.org http://seclists.org/fulldisclosure/2025/Mar/4

Mailing ListThird Party Advisory
seclists.org http://seclists.org/fulldisclosure/2025/Mar/5

Mailing ListThird Party Advisory
seclists.org http://seclists.org/fulldisclosure/2025/Oct/1

Mailing ListThird Party Advisory
seclists.org http://seclists.org/fulldisclosure/2025/Oct/31

Mailing ListThird Party Advisory
github.com https://github.com/JGoyd/Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201

Third Party Advisory
github.com https://github.com/cisagov/vulnrichment/issues/194

Issue Tracking
lists.debian.org https://lists.debian.org/debian-lts-announce/2025/06/msg00016.html

Mailing List
support.apple.com https://support.apple.com/en-us/122281

Release NotesVendor Advisory
support.apple.com https://support.apple.com/en-us/122283

Release NotesVendor Advisory
support.apple.com https://support.apple.com/en-us/122284

Release NotesVendor Advisory
support.apple.com https://support.apple.com/en-us/122285

Release NotesVendor Advisory
support.apple.com https://support.apple.com/en-us/122345

Release NotesVendor Advisory
support.apple.com https://support.apple.com/en-us/122346

Release NotesVendor Advisory
support.apple.com https://support.apple.com/en-us/122372

Release NotesVendor Advisory
support.apple.com https://support.apple.com/en-us/122376

Release NotesVendor Advisory
cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24201

US Government Resource

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.