VulnRadar

Data against noise.

Built with NaN
Page generated: 11 Nov 2026, 13:15 UTC
← Dashboard

CVE-2025-24200

macOS

An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.1 and iPadOS 18.3.1, iPadOS 17.7.5. A physical attack may disable USB Restricted Mode on a locked device. Apple is aw…

Read full description
An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.1 and iPadOS 18.3.1, iPadOS 17.7.5. A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.
CVSS 6.1 (MEDIUM) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE
8.2/10
REALITY · THREAT PRIORITY
7.9/10
General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?
  • Recorded exploitation baseline: +7.00
  • Technical severity: CVSS 6.1: +0.91
  • Fresh EPSS: 4.46%: +0.02

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 41 documents and public datasets.

Hype components

Headline sample (25%)
30/100
Press, 30 days (60%)
100/100
Grounded branding (15%)
100/100
HYPE TOTAL82/100

Sources and documents

OS X Daily
Press · 02 Nov 2026, 22:14 · Get the Default Wallpaper from the PROLED XDR Touchscreen MacBook Pro - OS X Daily
OS X Daily
Press · 02 Nov 2026, 21:49 · Deals: Save $200 on M5 MacBook Air, $200 Off Mac Studio, $100 Off iPad Air, & More - OS X Daily
synth anatomy
Press · 02 Nov 2026, 21:35 · 4Pockets SpectraPad: a spectral synth (iPadOS/macOS) built for hands-on sound design - synth anatomy
AppleInsider
Press · 02 Nov 2026, 14:02 · It's not clear if macOS Golden Gate really did anything for ultrawide monitors - AppleInsider
West Virginia University
Press · 02 Nov 2026, 13:05 · E-News | macOS Golden Gate available, Mac users encouraged to update by Nov. 16 - West Virginia University
See all 41 source documents
Notebookcheck
Press · 02 Nov 2026, 11:56 · SteamOS for Apple Macs is finally here: AAA PC games get tested on MacBook Pro - Notebookcheck
shattered.io
Press · 02 Nov 2026, 09:56 · Apple Silicon vs Intel: 5 Mac Checks, macOS 27 [2026] - shattered.io
shattered.io
Press · 01 Nov 2026, 10:01 · Apple Silicon Wins [2026]: Rosetta 2 Ends After 1 macOS - shattered.io
9to5Mac
Press · 31 Oct 2026, 20:49 · Here’s how the new MacBook Pro and macOS 27 are optimized for touch - 9to5Mac
Bedroom Producers Blog
Press · 31 Oct 2026, 15:06 · ZL Audio releases ZL Limiter, a FREE limiter for Windows, macOS, and Linux - Bedroom Producers Blog
Notebookcheck
Press · 30 Oct 2026, 15:54 · RPCS3 announces major macOS graphics update in time for new OLED MacBook Pro 14/16 - Notebookcheck
Bedroom Producers Blog
Press · 30 Oct 2026, 14:36 · simpleTapeStop is a FREE tape stop plugin for macOS, Windows, and Linux - Bedroom Producers Blog
PetaPixel
Press · 29 Oct 2026, 15:35 · The Lack of macOS on iPad Pro Is Starting To Feel Absurd - PetaPixel
MacRumors
Press · 29 Oct 2026, 12:33 · How macOS Adapts Its Controls for Touch on the New MacBook Pro - MacRumors
AppleInsider
Press · 28 Oct 2026, 19:13 · How macOS is changing on touchscreens beyond SideCar, but only a bit - AppleInsider
The Verge
Press · 28 Oct 2026, 17:48 · Here’s how macOS is changing for touchscreens - The Verge
MacRumors
Press · 28 Oct 2026, 11:28 · macOS 27 Assets Hint at Dynamic Island for MacBook Pro - MacRumors
Ars Technica
Press · 26 Oct 2026, 20:04 · Apple releases iOS and macOS 27.2 with new Siri AI features, new Music logo - Ars Technica
9to5Mac
Press · 26 Oct 2026, 18:46 · macOS 27.2 Golden Gate now available, here’s everything new [U] - 9to5Mac
9to5Mac
Press · 26 Oct 2026, 18:46 · Apple releases macOS Sequoia 15.8.2 and macOS Tahoe 26.7.2 - 9to5Mac
AppleInsider
Press · 26 Oct 2026, 17:58 · macOS 27.2 is out with cosmetic changes, new Siri AI languages - AppleInsider
MacRumors
Press · 26 Oct 2026, 17:48 · Apple Releases macOS Golden Gate 27.2 - MacRumors
AppleInsider
Press · 19 Oct 2026, 07:00 · Release candidates of iOS 27.2, macOS 27.2 land as public version nears - AppleInsider
Macworld
Press · 25 Sep 2026, 07:00 · macOS buttons have come a long way. See the 40-year evolution here - Macworld
MacRumors
Press · 24 Sep 2026, 07:00 · What's Gone in macOS Golden Gate and What's Next in macOS 28 - MacRumors
The Hacker News
Press · 13 Dec 2025, 08:00 · Apple Issues Security Updates After Two WebKit Flaws Found Exploited in the Wild - The Hacker News
Dark Reading
Press · 22 Aug 2025, 07:00 · Apple Fixes Zero Day Used in 'Sophisticated' Attack - Dark Reading
The Hacker News
Press · 21 Aug 2025, 07:00 · Apple Patches CVE-2025-43300 Zero-Day in iOS, iPadOS, and macOS Exploited in Targeted Attacks - The Hacker News
The Hacker News
Press · 13 Jun 2025, 07:00 · Apple Zero-Click Flaw in Messages Exploited to Spy on Journalists Using Paragon Spyware - The Hacker News
Security Affairs
Press · 13 Jun 2025, 07:00 · Apple confirmed that Messages app flaw was actively exploited in the wild - Security Affairs
The Hacker News
Press · 17 Apr 2025, 07:00 · Apple Patches Two Actively Exploited iOS Flaws Used in Sophisticated Targeted Attacks - The Hacker News
Help Net Security
Press · 17 Apr 2025, 07:00 · Apple plugs zero-day holes used in targeted iPhone attacks (CVE-2025-31200, CVE-2025-31201) - Help Net Security
TechRepublic
Press · 02 Apr 2025, 07:00 · Apple Patches Critical Vulnerabilities in iOS 15 and 16 - TechRepublic
BleepingComputer
Press · 01 Apr 2025, 07:00 · Apple backports zero-day patches to older iPhones and Macs - BleepingComputer
The Hacker News
Press · 01 Apr 2025, 07:00 · Apple Backports Critical Fixes for 3 Recent 0-Days Impacting Older iOS and macOS Devices - The Hacker News
Hong Kong Computer Emergency Response Team Coordination Centre
Press · 13 Feb 2025, 08:00 · Apple Products Multiple Vulnerabilities - Hong Kong Computer Emergency Response Team Coordination Centre
TechTarget
Press · 11 Feb 2025, 08:00 · Apple zero day used in ‘extremely sophisticated attack’ - TechTarget
Infosecurity Magazine
Press · 11 Feb 2025, 08:00 · Apple Mitigates “Extremely Sophisticated” Zero-Day Exploit - Infosecurity Magazine
Cyber Security Agency of Singapore
Press · 11 Feb 2025, 08:00 · Active Exploitation of a Zero-Day Vulnerability in Apple Products - Cyber Security Agency of Singapore
The Hacker News
Press · 11 Feb 2025, 08:00 · Apple Patches Actively Exploited iOS Zero-Day CVE-2025-24200 in Emergency Update - The Hacker News
Security Affairs
Press · 10 Feb 2025, 08:00 · Apple fixes iPhone and iPad bug exploited in ‘extremely sophisticated attacks’ - Security Affairs

Score evolution

● Hype   ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

024681002 Nov 2026 · OBSERVED EXPLOITATION + LOWER RECENT ATTENTIONHype 0.0Reality 7.903 Nov 2026 · HIGH ATTENTION + OBSERVED EXPLOITATIONHype 8.8Reality 7.903 Nov 2026 · HIGH ATTENTION + OBSERVED EXPLOITATIONHype 8.2Reality 7.9Nov 2Nov 3Nov 3

━ Hype Score (Perceived)  ━ Reality threat priority. Definition changes are not new attacks.

Public exploit evidence

0

Public exploit entries / repo candidates

Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence
Exploitation recorded
Priority basis
Recorded exploitation; CVSS 6.1; EPSS 4.5%
Attention, last 30 days
23 distinct story titles; 23 press documents; 1 publisher domains.
Technical potential
physical access, no prior privileges, no user interaction.
Observed activity
Exploitation recorded in CISA KEV.
Known scale
Not quantified.
Evidence confidence basis
Trusted exploitation confirmation

Score evaluated: 2026-11-05 13:59:30.643079+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline
First press mention
10 Feb 2025, 08:00
Published
10 Feb 2025, 19:04
Added to the CISA KEV catalog
12 Feb 2025, 00:00
Latest press mention
02 Nov 2026, 22:14
Score calculated
05 Nov 2026, 13:59
Name
macOS
Source: CVE List V5 · CISA KEV · FIRST EPSS · GitHub · RSSVulnRadar