CVE-2025-24221: Sensitive keychain data may be accessible from an iOS backup in Apple iOS and iPadOS
This issue was addressed with improved data access restriction. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, visionOS 2.4. Sensitive keychain data may be accessible from an iOS backup.
AI Analysis
Technical Summary
This vulnerability (CVE-2025-24221) affects Apple iOS and iPadOS devices by allowing sensitive keychain data to be accessible from an iOS backup. The issue arises from insufficient data access restrictions on backup data. Apple fixed the vulnerability by improving data access restrictions in iOS 18.4, iPadOS 18.4, iPadOS 17.7.6, and visionOS 2.4. The CVSS v3.1 base score is 7.5, indicating a high severity with network attack vector, low attack complexity, no privileges or user interaction required, and high confidentiality impact without integrity or availability impact.
Potential Impact
An attacker with access to an iOS backup could extract sensitive keychain data, potentially compromising confidential information stored in the keychain. This could lead to unauthorized disclosure of credentials or other sensitive secrets. The vulnerability does not impact integrity or availability of the device or data.
Mitigation Recommendations
Apple has released official fixes for this vulnerability in iOS 18.4, iPadOS 18.4, iPadOS 17.7.6, and visionOS 2.4. Users and administrators should update affected devices to these versions or later to remediate the issue. No additional mitigation steps are indicated beyond applying the official updates.
CVE-2025-24221: Sensitive keychain data may be accessible from an iOS backup in Apple iOS and iPadOS
Description
This issue was addressed with improved data access restriction. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, visionOS 2.4. Sensitive keychain data may be accessible from an iOS backup.
CVSS v3.1
Score 7.5high
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CVE-2025-24221) affects Apple iOS and iPadOS devices by allowing sensitive keychain data to be accessible from an iOS backup. The issue arises from insufficient data access restrictions on backup data. Apple fixed the vulnerability by improving data access restrictions in iOS 18.4, iPadOS 18.4, iPadOS 17.7.6, and visionOS 2.4. The CVSS v3.1 base score is 7.5, indicating a high severity with network attack vector, low attack complexity, no privileges or user interaction required, and high confidentiality impact without integrity or availability impact.
Potential Impact
An attacker with access to an iOS backup could extract sensitive keychain data, potentially compromising confidential information stored in the keychain. This could lead to unauthorized disclosure of credentials or other sensitive secrets. The vulnerability does not impact integrity or availability of the device or data.
Mitigation Recommendations
Apple has released official fixes for this vulnerability in iOS 18.4, iPadOS 18.4, iPadOS 17.7.6, and visionOS 2.4. Users and administrators should update affected devices to these versions or later to remediate the issue. No additional mitigation steps are indicated beyond applying the official updates.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- apple
- Date Reserved
- 2025-01-17T00:00:45.004Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 69092140fe7723195e053abd
Added to database: 11/03/2025, 21:40:16 UTC
Last enriched: 06/24/2026, 14:32:09 UTC
Last updated: 09/10/2026, 19:36:49 UTC
Views: 106
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.