Severity
High
Analysis Summary
CVE-2025-24274 CVSS:7.8
Apple macOS Ventura could allow a local attacker to gain elevated privileges, caused by an input validation issue in the Mobile Device Service component when using a specially crafted application.
CVE-2025-30436 CVSS:9.1
This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.4 and iPadOS 18.4. An attacker may be able to use Siri to enable Auto-Answer Calls.
Impact
- Privilege Escalation
Indicators of Compromise
CVE
CVE-2025-24274
CVE-2025-30436
Affected Vendors
- Apple
Affected Products
- Apple iOS and iPadOS - unspecified
- Apple macOS Ventura - 13.7.5
Remediation
Refer to Apple's security Advisory for patch, upgrade, or suggested workaround information.