{"id":"CVE-2025-24225","published":"2025-05-12T21:42:48Z","modified":"2026-07-25T01:16:50Z","title":"An injection issue was addressed with improved input validation","vendor":"Apple","product":"iOS and iPadOS","tier":"tail","description":{"text":"An injection issue was addressed with improved input validation. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7. Processing an email may lead to user interface spoofing.","provenance":"source","from":"CVE.org"},"cvss":{"score":6.5,"severity":"MEDIUM","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","provenance":"source","from":"CISA ADP Vulnrichment"},"epss":{"score":0.00523,"percentile":0.44245,"provenance":"source"},"cwes":[{"id":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation"}],"references":[{"url":"https://support.apple.com/en-us/122404","tags":[]},{"url":"https://support.apple.com/en-us/122405","tags":[]},{"url":"http://seclists.org/fulldisclosure/2025/May/6","tags":[]}],"priority":{"score":13.4,"factors":[{"name":"EPSS percentile","points":8.85},{"name":"CVSS severity","points":4.55}]},"vendorSlug":"apple","affectedVersions":[{"vendor":"Apple","product":"iOS and iPadOS","versions":["< 18.5"]},{"vendor":"Apple","product":"iPadOS","versions":["< 17.7.7"]}],"euvd":{"id":"EUVD-2025-14859","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-class-apple-ios-macos-cwe-79"}}