CVE-2025-24194medium

CVE-2025-24194

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.5epss 0.7%

probabilidad de explotación

0.7%top 48% de las CVE

explotación observada

noninguna fuente lo reporta

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing maliciously crafted web content may result in the disclosure of process memory.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Productos afectados

Apple · iOS and iPadOS Apple · macOS Apple · tvOS Apple · visionOS Apple · watchOS

Referencias

http://seclists.org/fulldisclosure/2025/Apr/11 http://seclists.org/fulldisclosure/2025/Apr/12 http://seclists.org/fulldisclosure/2025/Apr/13 http://seclists.org/fulldisclosure/2025/Apr/4 http://seclists.org/fulldisclosure/2025/Apr/8 https://support.apple.com/en-us/122371 https://support.apple.com/en-us/122373 https://support.apple.com/en-us/122376 https://support.apple.com/en-us/122377 https://support.apple.com/en-us/122378