CVE-2025-24221highCWE-863

CVE-2025-24221: high-severity vulnerability in Apple iPadOS

Published 31 Mar 2025 · Updated 23 Jun 2026

Follow this CVE + Monitor iOS + Monitor iPadOS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 0.9%

This issue was addressed with improved data access restriction. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, visionOS 2.4. Sensitive keychain data may be accessible from an iOS backup.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

Apple · iOS and iPadOS Apple · iPadOS Apple · visionOS

Related CVEs — Apple iPadOS

In the same product, most dangerous first.

CVE-2025-43300CRITICALCVE-2025-43300EPSS 65.2%KEV CVE-2023-41064HIGHCVE-2023-41064EPSS 53.4%KEV CVE-2023-32434HIGHCVE-2023-32434EPSS 51.5%KEV CVE-2023-28205HIGHCVE-2023-28205EPSS 27.1%KEV CVE-2026-86950HIGHCVE-2026-86950EPSS 26.2%KEV CVE-2025-43529HIGHCVE-2025-43529EPSS 25.7%KEV

References

http://seclists.org/fulldisclosure/2025/Apr/12 http://seclists.org/fulldisclosure/2025/Apr/4 http://seclists.org/fulldisclosure/2025/Apr/5 https://support.apple.com/en-us/122371 https://support.apple.com/en-us/122372 https://support.apple.com/en-us/122378