Rewterz

Multiple Intel Products Vulnerabilities

May 20, 2025
Rewterz

Critical VMware ESXi and vCenter Vulnerability Allows Remote Command Execution

May 20, 2025

Multiple Apple Products Vulnerabilities

Severity

High

Analysis Summary

CVE-2025-24274 CVSS:7.8

Apple macOS Ventura could allow a local attacker to gain elevated privileges, caused by an input validation issue in the Mobile Device Service component when using a specially crafted application.

CVE-2025-30436 CVSS:9.1

This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.4 and iPadOS 18.4. An attacker may be able to use Siri to enable Auto-Answer Calls.

Impact

  • Privilege Escalation

Indicators of Compromise

CVE

  • CVE-2025-24274

  • CVE-2025-30436

Affected Vendors

  • Apple

Affected Products

  • Apple iOS and iPadOS - unspecified
  • Apple macOS Ventura - 13.7.5

Remediation

Refer to Apple's security Advisory for patch, upgrade, or suggested workaround information.

CVE-2025-24274

CVE-2025-30436

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.