Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4. An attacker on the local network may be able to corrupt process memory.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-08 | 1 | Active Exploitation1 |
| 2026-03-09 | 1 | General1 |
Top 5 Trending CVEs: 1 - CVE-2024-1086 2 - CVE-2022-40982 3 - CVE-2025-24252 4 - CVE-2025-55182 5 - CVE-2026-21533 #cve #cvetrends #cveshield #cybersecurity https://www.cveshield.com/dashboard
Post summary
The tweet merely lists a set of trending CVE identifiers with no additional technical, exploit, or mitigation information.
Attackers on the same Wi-Fi network send crafted AirPlay packets exploiting bugs like use-after-free (e.g., CVE-2025-24252) or buffer overflows in the protocol/SDK. This enables zero-click remote code execution—no interaction needed—letting them install malware, read files, or steal data on vulnerable devices. It's wormable, so it can spread across the network. Apple patched it fully in iOS 18.4+ (March 2025). If updated, you're protected. Check Settings > General > Software Update.
Post summary
CVE‑2025‑24252 is actively exploited via zero‑click, wormable AirPlay packets, enabling remote code execution on vulnerable devices; Apple has fixed the issue in iOS 18.4+.
5 of 5 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | apple | ipados | - | - | - |
| OS | apple | iphone_os | - | - | - |
| OS | apple | macos | - | - | - |
| OS | apple | tvos | - | - | - |
| OS | apple | visionos | - | - | - |