3 matches found
CVE-2025-24104
CVE-2025-24104 concerns Apple platforms (iPadOS 17.7.4, iOS 18.3, iPadOS 18.3) where the backup restore process could incorrectly handle symlinks, allowing a malicious backup to point system file reads/writes and potentially modify protected system files. Apple’s advisories indicate the issue is ...
5.5CVSS7.2AI score0.01514EPSS
SaveExploits0References3Affected Software2
CVE-2024-44258
A symlink resolution vulnerability exists in the ManagedConfiguration framework and profiled daemon on Apple devices. When restoring a maliciously crafted backup, the migration process fails to validate if a destination folder is a symbolic link (symlink) , allowing files to be migrated into rest...
7.1CVSS5.8AI score0.00751EPSS
SaveIn wildExploits2References8Affected Software4
20