
Apple has released a security update addressing a critical zero-day vulnerability in its WebKit browser engine, identified as CVE-2025-24201. This flaw has reportedly been exploited in highly advanced attacks against specific targets.
The vulnerability is an out-of-bounds write issue that allows an attacker to create malicious web content capable of escaping the Web Content sandbox. Apple has stated that the update includes improved validations to avert unauthorized actions. This fix complements another security measure that had been implemented in iOS 17.2.
Apple admitted that this vulnerability "may have been exploited in an extremely sophisticated attack" targeting certain individuals using versions of iOS prior to 17.2. However, it did not clarify whether the flaw was discovered by its security team or reported by an external researcher, nor did it disclose when the attacks commenced, their duration, or the identities of the affected targets.
The latest security update is available for multiple devices and operating systems, including:
- iOS 18.3.2 and iPadOS 18.3.2 – Compatible with iPhone XS and later, various models of iPad Pro, iPad Air 3rd generation and later, and iPad mini 5th generation and later.
- macOS Sequoia 15.3.2 – For Macs running macOS Sequoia.
- Safari 18.3.1 – For Macs operating on macOS Ventura and macOS Sonoma.
- visionOS 2.3.2 – Designed for Apple Vision Pro.
With this update, Apple has now addressed three actively exploited zero-day vulnerabilities this year, adding to previous fixes for CVE-2025-24085 and CVE-2025-24200.
Welcome to DediRock, your trusted partner in high-performance hosting solutions. At DediRock, we specialize in providing dedicated servers, VPS hosting, and cloud services tailored to meet the unique needs of businesses and individuals alike. Our mission is to deliver reliable, scalable, and secure hosting solutions that empower our clients to achieve their digital goals. With a commitment to exceptional customer support, cutting-edge technology, and robust infrastructure, DediRock stands out as a leader in the hosting industry. Join us and experience the difference that dedicated service and unwavering reliability can make for your online presence. Launch our website.