Apple Patches Two Actively Exploited iOS Flaws Used in Sophisticated Targeted Attacks
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-24085 | Use-After-Free Privilege Escalation in Apple iOS, iPadOS, macOS and Other Platforms | 10.0 | 18% | KEV | KEV |
| CVE-2025-24200 | Incorrect Authorization in Apple iOS/iPadOS Lets Attackers Disable USB Restricted Mode | 6.1 | 4% | KEV | KEV |
| CVE-2025-24201 | WebKit Out-of-Bounds Write Sandbox Escape in Apple iOS, Safari, and macOS | 10.0 | 4% | KEV | KEV |
CVE-2025-31200+1 related CVE | Memory Corruption in Apple iOS, iPadOS, macOS Audio Processing Enables Code Execution | 9.8 | 21% | KEVPoC ×2 | KEV |
From the original article
2 min read at thehackernews.com
Apple on Wednesday released security updates for iOS, iPadOS, macOS Sequoia, tvOS, and visionOS to address two security flaws that it said have come under active exploitation in the wild. CVE-2025-31200 (CVSS score: 7. 5) - A memory corruption vulnerability in the Core Audio framework that could allow code execution when processing an audio stream in a maliciously crafted media file CVE-2025-31201 (CVSS score: 6.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.