CVE-2025-24095highCWE-288

CVE-2025-24095: high-severity vulnerability in Apple visionOS

Published 31 Mar 2025 · Updated 02 Apr 2026

Follow this CVE + Monitor iOS + Monitor iPadOS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.6epss 0.7%

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, visionOS 2.4. An app may be able to bypass Privacy preferences.

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L

Affected products

Apple · iOS and iPadOS Apple · visionOS

Related CVEs — Apple visionOS

In the same product, most dangerous first.

CVE-2025-43300CRITICALCVE-2025-43300EPSS 65.2%KEV CVE-2023-41064HIGHCVE-2023-41064EPSS 53.4%KEV CVE-2023-32434HIGHCVE-2023-32434EPSS 51.5%KEV CVE-2023-28205HIGHCVE-2023-28205EPSS 27.1%KEV CVE-2026-86950HIGHCVE-2026-86950EPSS 26.2%KEV CVE-2025-43529HIGHCVE-2025-43529EPSS 25.7%KEV

References

http://seclists.org/fulldisclosure/2025/Apr/12 http://seclists.org/fulldisclosure/2025/Apr/4 https://support.apple.com/en-us/122371 https://support.apple.com/en-us/122378