Actively exploited in the wild
Apple iOS and iPadOS Incorrect Authorization Vulnerability
Apple - iOS and iPadOS · Listed in the CISA KEV since 2025-02-12. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2025-24200
MediumCVSS 6.1KEVSummary
An authorization issue was addressed with improved state management. A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.
Risk Assessment
An attacker with physical access could bypass USB restrictions, potentially leading to unauthorized access to device data.
Recommendation
Update iOS and iPadOS to the latest versions (15.8.4, 16.7.11, 18.3.1, iPadOS 17.7.5) to fix the vulnerability.
Other vulnerabilities in iOS and iPadOS
See all- CVE-2026-84605Low
An authorization issue in iOS and iPadOS allows an app to read the device's name. The issue was addressed with improved state management and is fixed in iOS 26.7.2, iPadOS 26.7.2, iOS 27.2, and iPadOS 27.2.
- CVE-2026-84594Medium
A logic issue in iOS and iPadOS allows an app to access sensitive user data. The issue was addressed with improved state management and is fixed in iOS 26.7.2, iPadOS 26.7.2, iOS 27, and iPadOS 27.
- CVE-2026-112547Medium
A type confusion issue was addressed with improved checks. An app may be able to access sensitive user data.
- CVE-2026-112507Low risk· EPSS 6%
An out-of-bounds write issue was addressed with improved bounds checking in iOS and iPadOS. An app may be able to cause unexpected system termination or write kernel memory.
- CVE-2026-86977High
An authorization issue was addressed with improved network restrictions. The issue is fixed in iOS 27 and iPadOS 27. An app may be able to initiate calls or send messages.
- CVE-2026-28967Medium
A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4. An attacker in a privileged network position may be able to cause a denial-of-service.
- CVE-2026-28950Medium
A logging issue in iOS and iPadOS caused notifications marked for deletion to be unexpectedly retained on the device. Apple addressed this with improved data redaction in iOS 15.8.8, 16.7.16, 18.7.8, 26.4.2 and iPadOS 15.8.8, 16.7.16, 17.7.11, 18.7.8 and 26.4.2.
- CVE-2025-31216Low
The issue was addressed with improved checks in iOS 18.5, iPadOS 18.5, and iPadOS 17.7.7. An attacker with physical access to a device may be able to override managed Wi-Fi profiles.
- CVE-2025-43450High
A logic issue was addressed with improved checks. An app may be able to learn information about the current camera view before being granted camera access.
Original NVD description (English source)
An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.1 and iPadOS 18.3.1, iPadOS 17.7.5. A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS