- Description
- A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.3, tvOS 18.3, watchOS 11.3, iOS 18.3 and iPadOS 18.3. A malicious app may be able to gain root privileges.
- Source
- product-security@apple.com
- NVD status
- Modified
CVSS 3.1
- Type
- Primary
- Base score
- 7.8
- Impact score
- 5.9
- Exploitability score
- 1.8
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
- nvd@nist.gov
- NVD-CWE-noinfo
- 134c704f-9b21-4f2e-91b3-4a467353bcc0
- CWE-276
- Hype score
- Not currently trending
🔴 #macOS, tvOS, watchOS, #iOS, iPadOS, Privilege Escalation #CVE-2025-24107 (Critical) https://t.co/fNFO3EOicL
@dailycve
30 Jan 2025
5 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Apple’s latest updates for iOS 18.3 & iPadOS 18.3 fix some serious security issues include : 1. Kernel Privilege Escalation (CVE-2025-24107, CVE-2025-24159): Malicious apps could execute code with root/kernel privileges. 2. WebKit RCE (CVE-2025-24137): Malicious web content
@SaifuddinAmri__
27 Jan 2025
302 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6B7F80FC-EB0A-4B78-8CB7-18E5F162CD6A",
"versionEndExcluding": "18.3"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "71A94ACA-8143-475F-8A89-8020B86CE80B",
"versionEndExcluding": "18.3"
},
{
"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "38BA63B3-CC2C-4E63-AE2C-B8DB08B5E89B",
"versionEndExcluding": "15.3"
},
{
"criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "60C0BA29-0969-4181-B6F1-4606986B18E4",
"versionEndExcluding": "18.3"
},
{
"criteria": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A128237-004C-49D7-A559-5BBC38362361",
"versionEndExcluding": "11.3"
}
],
"operator": "OR"
}
]
}
]