VYPR
← All advisories
High severity7.7NVD Advisory· Published Apr 29, 2025· Updated Apr 2, 2026

CVE-2025-24206

CVE-2025-24206

Description

An authentication issue was addressed with improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4. An attacker on the local network may be able to bypass authentication policy.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Apple Inc./Ipados2 versions
    cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <17.7.6
    • (no CPE)range: <18.4, <17.7.6
  • Apple Inc./Iphone OS
    cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
    Range: <18.4
  • Apple Inc./macOS2 versions
    cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*range: <13.7.5
    • (no CPE)range: <15.4, <14.7.5, <13.7.5
  • Apple Inc./tvOS
    cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
    Range: <18.4
  • Apple Inc./Visionos
    cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
    Range: <2.4
  • Cisco Systems, Inc./Cisco iOSllm-fuzzy
    Range: <18.4

Patches

Vulnerability mechanics

References

7

News mentions

0

No linked articles in our index yet.