5.5
Medium
CVE-2025-24091 An app could impersonate system notifications
Description
An app could impersonate system notifications. Sensitive notifications now require restricted entitlements. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.3. An app may be able to cause a denial-of-service.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| iPadOS 17.7 | earliest → < 17.7.3 | 17.7.3 |
| iOS and iPadOS 18.3 | earliest → < 18.3 | 18.3 |
References
- support.apple.com support.apple.com
- support.apple.com support.apple.com
Timeline
- Published
- Last modified
Other CVEs of iPadOS
The 166 CVEs of iPadOS →
CVE-2026-28950
A logging issue was addressed with improved data redaction
6.2
Medium
CVE-2025-43210
An out-of-bounds access issue was addressed with improved bounds checking
6.3
Medium
CVE-2025-31216
The issue was addressed with improved checks
2.4
Low
CVE-2025-43374
An out-of-bounds read was addressed with improved bounds checking
4.3
Medium