CVE-2025-24225

An injection issue was addressed with improved input validation. This issue is fixed in iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5. Processing an email may lead to user interface spoofing.

Affected

Apple · iOS and iPadOS · iPadOS

CVSS v3.1 CNA

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS

0.52% chance of exploitation in the next 30 days, 43rd percentile

Published

2025-05-12

Updated

2026-07-25

Proof-of-concept exploits (1)

• richeeta/DEFCON33-Siriously-Leaky8★ · 2025-08-31

Security advisories

• https://support.apple.com/en-us/122404
• https://support.apple.com/en-us/122405

References

• CVE Record
• NVD entry

Related

• CVE-2024-44235
• CVE-2025-24198