Back to the CVE list
CVE-2025-24085 CISA KEV · Actively exploited

Apple Multiple Products Use-After-Free Vulnerability

CVSS score

—

EPSS probability

%17.5

Risk score

—

Published

1 y ago

OverviewPublic Exploits (4)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
windz3r0day/CVE-2025-24085
GitHub

report for CVE-2025-24085 Apple CoreMedia (★1)

Public PoCSource updated: 21.05.2025 07:23:43
G
clidancc1/CVE-2025-24085
GitHub

CVE-2025-24085: Incorrect Default Permissions (CWE-276) (★0)

Public PoCSource updated: 30.01.2025 06:12:38
G
JGoyd/glass-cage-ios18-cve-2025-24085-cve-2025-24201
GitHub

Glass Cage is a zero-click PNG-based RCE chain in iOS 18.2.1, exploiting WebKit (CVE-2025-24201) and Core Media (CVE-2025-24085) to achieve sandbox escape, kernel-level access, and device bricking. Triggered via iMessage, it enables full compromise with no user interaction. (★0)

Public PoCSource updated: 23.08.2025 15:27:12
E
macOS LaunchDaemon iOS 17.2 - Privilege Escalation
Exploit-DB

macOS LaunchDaemon iOS 17.2 - Privilege Escalation

Exploit referenceSource updated: 05.06.2025 00:00:00

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-24085"