NCSC-2025-0034 — Kwetsbaarheden verholpen in Apple iPadOS en iOS

Summary

Apple heeft kwetsbaarheden verholpen in iOS en iPadOS.

Details

Interpretaties
De kwetsbaarheden omvatten onder andere problemen met geheugenbeheer, invoervalidatie, en de verwerking van webinhoud, die konden leiden tot ongeautoriseerde toegang, executie van willekeurige code en Denial-of-Service aanvallen. Apple geeft aan dat CVE-2025-24085, die kan worden misbruikt om verhoogde rechten te verkrijgen op het systeem, mogelijkerwijze actief is misbruikt.

Oplossingen
Apple heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Vulnerabilities 33

Critical 10.0

CVE-2025-24085 Exploited Public exploit EPSS 17%

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, …

Apple macOS iOS and iPadOS watchOS macOS iOS

Jan 27, 2025
KEV Jan 29, 2025
Critical 9.8

CVE-2025-24102

The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14…

Apple macOS iPadOS macOS iOS

Jan 27, 2025
Critical 9.8

CVE-2025-24118 Public exploit

The issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.4, macOS Sequoia 15.3, macOS …

Apple macOS iPadOS macOS iOS

Jan 27, 2025
Critical 9.8

CVE-2025-24126

An input validation issue was addressed. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, macOS Son…

Apple macOS iOS and iPadOS tvOS macOS iOS

Jan 27, 2025
Critical 9.1

CVE-2025-24154

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 18.3 and iPadOS 18.3, m…

Apple macOS iOS and iPadOS visionOS macOS iOS

Jan 27, 2025
High 8.8

CVE-2025-24150

A privacy issue was addressed with improved handling of files. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS …

Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu

Jan 27, 2025
High 8.0

CVE-2025-24137

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7…

Apple macOS iOS and iPadOS tvOS macOS iOS

Jan 27, 2025
High 7.8

CVE-2024-9956

Inappropriate implementation in WebAuthentication in Google Chrome on Android prior to 130.0.6723.58 allowed a local at…

Google Chrome chromium chromium Browsers Debian Wolfi

Oct 15, 2024
High 7.8

CVE-2025-24107

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS …

Apple macOS iOS and iPadOS watchOS macOS iOS

Jan 27, 2025
High 7.8

CVE-2025-24159

A validation issue was addressed with improved logic. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, m…

Apple macOS iOS and iPadOS watchOS macOS iOS

Jan 27, 2025
High 7.5

CVE-2025-24129

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS Sequo…

Apple macOS iOS and iPadOS tvOS macOS iOS

Jan 27, 2025
High 7.5

CVE-2025-24177

A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.3 and iPadOS 18.…

Apple macOS iOS and iPadOS iPadOS macOS iOS

Jan 27, 2025
Medium 6.5

CVE-2024-54478

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.2 and iPadOS 1…

Apple macOS iOS and iPadOS watchOS macOS iOS

Jan 27, 2025
Medium 6.5

CVE-2024-54497

The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.4, macOS Seq…

Apple macOS iOS and iPadOS watchOS macOS iOS

Jan 27, 2025
Medium 6.5

CVE-2025-24123

The issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Seq…

Apple macOS iOS and iPadOS watchOS macOS iOS

Jan 27, 2025
Medium 6.5

CVE-2025-24131

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, …

Apple macOS iOS and iPadOS tvOS macOS iOS

Jan 27, 2025
Medium 6.5

CVE-2025-24143

The issue was addressed with improved access restrictions to the file system. This issue is fixed in Safari 18.3, iOS 1…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu

Jan 27, 2025
Medium 6.5

CVE-2025-24158

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, ma…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jan 27, 2025
Medium 6.5

CVE-2025-24162

This issue was addressed through improved state management. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jan 27, 2025
Medium 5.5

CVE-2025-24086

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, …

Apple macOS iOS and iPadOS watchOS macOS iOS

Jan 27, 2025
Medium 5.5

CVE-2025-24104 Public exploit

This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17…

Apple iOS and iPadOS iPadOS iOS

Jan 27, 2025
Medium 5.5

CVE-2025-24117

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.3 and iPadOS 1…

Apple macOS iOS and iPadOS watchOS macOS iOS

Jan 27, 2025
Medium 5.5

CVE-2025-24124

The issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Seq…

Apple macOS iOS and iPadOS watchOS macOS iOS

Jan 27, 2025
Medium 5.5

CVE-2025-24127

The issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Seq…

Apple macOS iOS and iPadOS tvOS macOS iOS

Jan 27, 2025
Medium 5.5

CVE-2025-24149

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPa…

Apple macOS iOS and iPadOS watchOS macOS iOS

Jan 27, 2025
Medium 5.5

CVE-2025-24161

The issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Seq…

Apple macOS iOS and iPadOS watchOS macOS iOS

Jan 27, 2025
Medium 5.5

CVE-2025-24163

The issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iOS 18.4 and iPadOS 18.4…

Apple macOS iOS and iPadOS watchOS macOS iOS

Jan 27, 2025
Medium 4.3

CVE-2025-24113

The issue was addressed with improved UI. This issue is fixed in Safari 18.3, Safari 18.4, iOS 18.3 and iPadOS 18.3, iO…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers

Jan 27, 2025
Medium 4.3

CVE-2025-24128

The issue was addressed by adding additional logic. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS…

Apple macOS iOS and iPadOS Safari macOS iOS Browsers

Jan 27, 2025
Medium 4.3

CVE-2025-24160

The issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Seq…

Apple macOS iOS and iPadOS watchOS macOS iOS

Jan 27, 2025
Low 3.3

CVE-2025-24141

An authentication issue was addressed with improved state management. This issue is fixed in iOS 18.3 and iPadOS 18.3. …

Apple iOS and iPadOS iOS

Jan 27, 2025
Low 3.3

CVE-2025-24145

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 18.3 and…

Apple macOS iOS and iPadOS macOS iOS

Jan 27, 2025
Unscored —

CVE-2025-24166 Rejected

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Jan 27, 2025

Revision history

2025-01-28 #0
Initiele versie

References

Reference - cveprojectv5; nvd
https://support.apple.com/en-us/122066
Reference - cveprojectv5; nvd
https://support.apple.com/en-us/122067

Kwetsbaarheden verholpen in Apple iPadOS en iOS

Summary

Details

Vulnerabilities 33

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, …

The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14…

The issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.4, macOS Sequoia 15.3, macOS …

An input validation issue was addressed. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, macOS Son…

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 18.3 and iPadOS 18.3, m…

A privacy issue was addressed with improved handling of files. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS …

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7…

Inappropriate implementation in WebAuthentication in Google Chrome on Android prior to 130.0.6723.58 allowed a local at…

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS …

A validation issue was addressed with improved logic. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, m…

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS Sequo…

A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.3 and iPadOS 18.…

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.2 and iPadOS 1…

The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.4, macOS Seq…

The issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Seq…

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, …

The issue was addressed with improved access restrictions to the file system. This issue is fixed in Safari 18.3, iOS 1…

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, ma…

This issue was addressed through improved state management. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.…

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, …

This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17…

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.3 and iPadOS 1…

The issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Seq…

The issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Seq…

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPa…

The issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Seq…

The issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iOS 18.4 and iPadOS 18.4…

The issue was addressed with improved UI. This issue is fixed in Safari 18.3, Safari 18.4, iOS 18.3 and iPadOS 18.3, iO…

The issue was addressed by adding additional logic. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS…

The issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Seq…

An authentication issue was addressed with improved state management. This issue is fixed in iOS 18.3 and iPadOS 18.3. …

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 18.3 and…

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Revision history

References