medium5.5
CVE-2025-24091
An app could impersonate system notifications.
Impact
An app could impersonate system notifications. Sensitive notifications now require restricted entitlements. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.3. An app may be able to cause a denial-of-service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Ipados | before 17.7.3 from 18.0 before 18.3 |
| Apple | Iphone Os | through 18.3 |