VulnerabilityAnalyzed
CVE-2025-24091
An app may be able to cause a denial-of-service.
MEDIUM 5.5EPSS 0.26%
Does this matter?
Lower severity and a low EPSS score (0.26%). Track it; it rarely justifies an emergency change on its own.
Description
An app could impersonate system notifications. Sensitive notifications now require restricted entitlements. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.3. An app may be able to cause a denial-of-service.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- EPSS
- 0.26% probability · 18th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-290
- Affected
- apple/ipados · apple/iphone os
- Source
- product-security@apple.com
References
- https://support.apple.com/en-us/121838Vendor Advisory
- https://support.apple.com/en-us/122066Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.