PromptRiskDBThreat intelligence atlas

CVE-2025-24085 - Apple Multiple Products

AI Vulnerability Context

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.3, visionOS 2.3, watchOS 11.3. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2.

Overview

A source-backed snapshot of this vulnerability.

CISA KEVyesWhether CISA lists this as exploited.
Techniques0AI attack methods connected to this vulnerability.
Case studies0Examples where this vulnerability is mentioned.

Vulnerability status

How serious this vulnerability is and whether it is known to be exploited.

CISA KEVCRITICAL
CVE ID
CVE-2025-24085
Vendor/project
Apple
Product
Multiple Products
Vulnerability name
Apple Multiple Products Use-After-Free Vulnerability
Date added
2025-01-29
Due date
2025-02-19
Known ransomware campaign use
Unknown
CVSS v3
10.0
CWE-416

Exploit context

What the vulnerability is about.

No description available. The source record only contains identifiers and metadata.

Source evidence

Original public records and references for this page.

Original source

Original source links

Open the public records and source datasets used for this page.