Skip to content
Sign in
7.7 High

CVE-2025-24206 An authentication issue was addressed with improved state management

Description

An authentication issue was addressed with improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4. An attacker on the local network may be able to bypass authentication policy.

Affected products and versions

Product Affected versions Fixed in
tvOS 18.4 earliest → < 18.4 18.4
iOS and iPadOS 18.4 earliest → < 18.4 18.4
iPadOS 17.7 earliest → < 17.7.6 17.7.6
macOS 15.4 earliest → < 15.4 15.4
macOS 14.7 earliest → < 14.7.5 14.7.5
macOS 13.7 earliest → < 13.7.5 13.7.5
visionOS 2.4 earliest → < 2.4 2.4

Other CVEs of tvOS

The 1386 CVEs of tvOS →
CVE-2026-86972 A buffer overflow was addressed with improved size validation 7.8 High CVE-2026-113912 An out-of-bounds access issue was addressed with improved bounds checking 7.1 High CVE-2026-86964 A null pointer dereference was addressed with improved input validation 7.5 High CVE-2026-113904 A use-after-free issue was addressed with improved memory management 4.3 Medium
Track this CVE