CVEvulnerability
CVE-2025-24091
5.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2025-04-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-290
Description
An app could impersonate system notifications. Sensitive notifications now require restricted entitlements. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.3. An app may be able to cause a denial-of-service.
Affected configurations
• apple ipados (< 17.7.3)
• apple ipados (>= 18.0 < 18.3)
• apple iphone os (<= 18.3)
Related
Weakness · CWE (1)
- CWE-290 Authentication Bypass by Spoofing weakness
References
- https://support.apple.com/en-us/121838 Vendor Advisory
- https://support.apple.com/en-us/122066 Vendor Advisory