← back
CVE-2025-24091

CVE-2025-24091

CVSS 5.5 MEDIUMEPSS 0.3%CWE-290
An app could impersonate system notifications. Sensitive notifications now require restricted entitlements. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.3. An app may be able to cause a denial-of-service.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected products
Apple · iOS and iPadOSApple · iPadOS

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://support.apple.com/en-us/121838https://support.apple.com/en-us/122066