CVE-2025-24107: Apple iPadOS

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, tvOS 18.3, watchOS 11.3. A malicious app may be able to gain root privileges.

Affected products

• Apple iPadOS: before 18.3 (fixed in 18.3)
• Apple iPhone OS: before 18.3 (fixed in 18.3)
• Apple macOS: before 15.3 (fixed in 15.3)
• Apple tvOS: before 18.3 (fixed in 18.3)
• Apple watchOS: before 11.3 (fixed in 11.3)

Published 2025-01-27. Last modified 2026-06-17.