Apple Urges Immediate Updates to Fix Critical Zero-Day Vulnerabilities
Cybersecurity News
|
Contributed by: Drex DeFord
Summary
Apple has issued a security advisory regarding three critical zero-day vulnerabilities (CVE-2025-24200, CVE-2025-24201, and CVE-2025-24085) that are actively being exploited in cyberattacks, affecting a range of devices including iPhones, iPads, and Macs. Users are strongly advised to update their devices immediately to reduce security risks. The first vulnerability allows attackers to disable USB Restricted Mode, compromising device security, while the second affects WebKit, enabling malicious web content to bypass security measures. The third vulnerability involves a flaw in the CoreMedia component, which is critical for handling audio and video.