Apple Urges Immediate Updates to Fix Critical Zero-Day Vulnerabilities

Apple has issued a security advisory regarding three critical zero-day vulnerabilities (CVE-2025-24200, CVE-2025-24201, and CVE-2025-24085) that are actively being exploited in cyberattacks, affecting a range of devices including iPhones, iPads, and Macs. Users are strongly advised to update their devices immediately to reduce security risks. The first vulnerability allows attackers to disable USB Restricted Mode, compromising device security, while the second affects WebKit, enabling malicious web content to bypass security measures. The third vulnerability involves a flaw in the CoreMedia component, which is critical for handling audio and video.

Opens on Cybersecurity News