CVE-2025-24200

MEDIUM Year: 2025
CVSS v3 Score
6.1
Medium
Weakness Type
CWE-863
View all →

Vulnerability Description

An authorization issue was addressed with improved state management. This issue is fixed in iPadOS 17.7.5, iOS 18.3.1 and iPadOS 18.3.1. A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.

Related Vulnerabilities

CVE-2019-11724

MEDIUM
CVSS:6.1(Medium)

Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has been retired and now redirects to another site. This additional permission is unneces...

CWE-8632019

CVE-2021-20290

MEDIUM
CVSS:6.1(Medium)

An improper authorization handling flaw was found in Foreman. The OpenSCAP plugin for the smart-proxy allows foreman clients to execute actions that should be limited to the Foreman Server. This flaw ...

CWE-8632021

CVE-2021-3457

MEDIUM
CVSS:6.1(Medium)

An improper authorization handling flaw was found in Foreman. The Shellhooks plugin for the smart-proxy allows Foreman clients to execute actions that should be limited to the Foreman Server. This fla...

CWE-8632021

CVE-2022-1132

MEDIUM
CVSS:6.1(Medium)

Inappropriate implementation in Virtual Keyboard in Google Chrome on Chrome OS prior to 100.0.4896.60 allowed a local attacker to bypass navigation restrictions via physical access to the device.

CWE-8632022

CVE-2023-2257

MEDIUM
CVSS:6.1(Medium)

Authentication Bypass in Hub Business integration in Devolutions Workspace Desktop 2023.1.1.3 and earlier on Windows and macOS allows an attacker with access to the user interface to unlock a Hub Busi...

CWE-8632023

CVE-2023-29656

MEDIUM
CVSS:6.1(Medium)

An improper authorization vulnerability in Darktrace mobile app (Android) prior to version 6.0.15 allows disabled and low-privilege users to control "antigena" actions(block/unblock traffic) from the ...

CWE-8632023