CVE-2025-24091 — Apple / iOS and iPadOS

CVE-2025-24091

Apple / iOS and iPadOS PUBLISHED

Description (CNA)

An app could impersonate system notifications. Sensitive notifications now require restricted entitlements. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.3. An app may be able to cause a denial-of-service.

Affected (CNA)

Vendor / product	Versions
Apple / iOS and iPadOS	affected 0 before 18.3
Apple / iPadOS	affected 0 before 17.7.3

CWE

No CWE identifiers supplied.

References

https://support.apple.com/en-us/121838
https://support.apple.com/en-us/122066

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.