CVE-2025-24091

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.3 iPadOS versions prior to 18.3 iPadOS versions prior to 17.7.3

Description An app could impersonate system notifications, and sensitive notifications now require restricted entitlements. This issue could allow an app to cause a denial-of-service. The vulnerability exploits the Darwin notification system’s lack of sender verification.

Recommendations For iOS versions prior to 18.3, update to iOS 18.3 or later to resolve the issue. For iPadOS versions prior to 18.3, update to iPadOS 18.3 or later to resolve the issue. For iPadOS versions prior to 17.7.3, update to iPadOS 17.7.3 or later to resolve the issue. As a temporary workaround, consider restricting app and widget installs via Mobile Device Manager until the update is applied.