CVE-2025-24200: An authorization issue was addressed with improved state management. This issue is fixed in iPadOS 17.7.5, iOS 18.3.1 and iPadOS 18.3.1. A physical...

Description

An authorization issue was addressed with improved state management. This issue is fixed in iPadOS 17.7.5, iOS 18.3.1 and iPadOS 18.3.1. A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.

Known Exploited

🚨 This vulnerability is known to be exploited in the wild.

Classification

CVE ID: CVE-2025-24200

Affected Products

Vendor: Apple

Product: iPadOS

Timeline

2025-02-10 20:30:37 UTC
CyberInsider

Apple Patches Zero-Day Exploit Targeting Locked iPhones
2025-02-11 00:32:59 UTC
CVE

An authorization issue was addressed with improved state management. This issue is fixed in iPadOS 17.7.5, iOS 18.3.1 and iPadOS 18.3.1. A physical...
2025-02-11 05:00:36 UTC
TheHackerNews

Apple Patches Actively Exploited iOS Zero-Day CVE-2025-24200 in Emergency Update