{"id":12759,"date":"2025-04-01T11:57:55","date_gmt":"2025-04-01T11:57:55","guid":{"rendered":"https:\/\/fusionmindlabs.com\/blogs\/apple-fixes-3-critical-0-days-in-ios-macos\/"},"modified":"2025-04-01T11:57:56","modified_gmt":"2025-04-01T11:57:56","slug":"apple-fixes-3-critical-0-days-in-ios-macos","status":"publish","type":"post","link":"https:\/\/fusionmindlabs.com\/blogs\/apple-fixes-3-critical-0-days-in-ios-macos\/","title":{"rendered":"Apple Fixes 3 Critical 0-Days in iOS, macOS"},"content":{"rendered":"\n<\/p>\n<div>\n<p><span class=\"p-author\"><i class=\"icon-font icon-calendar\">\ue802<\/i><span class=\"author\">Apr 01, 2025<\/span><i class=\"icon-font icon-user\">\ue804<\/i><span class=\"author\">Ravie Lakshmanan<\/span><\/span><span class=\"p-tags\">Mobile Security \/ Vulnerability<\/span><\/p>\n<\/div>\n<div id=\"articlebody\">\n<div class=\"separator\" style=\"clear: both;\"><a href=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEiYFkbv9BXSh7qdjOO8CJFYwa1qrHgvlMUAqX1XLjivHW7JU_gKdsNFdX_Z1tXrq-5ZMNgPROgksD1pS3_o3FmAsMeDZEVpr-2y9eXL0zbCNV-ZJaCfCdxv9GeywyfdC8PM1zRe9cHxhFZYuCENi2BahfgYi4ZOHtD9O5pZnpTHkAQFEAmeLUr88D4UDOgq\/s728-rw-e365\/ios.jpg\" style=\"clear: left; display: block; float: left;  text-align: center;\" rel=\"nofollow noopener\" target=\"_blank\"><\/a><\/div>\n<p>Apple has released patches for three vulnerabilities that are being actively exploited in the wild, making them available for older models and previous versions of the operating systems.<\/p>\n<p>The vulnerabilities in question are as follows:<\/p>\n<ul>\n<li><strong><a href=\"https:\/\/thehackernews.com\/2025\/01\/apple-patches-actively-exploited-zero.html\" rel=\"noopener nofollow\" target=\"_blank\">CVE-2025-24085<\/a><\/strong> (CVSS score: 7.3) &#8211; This use-after-free bug in the Core Media component could allow a malicious application to elevate privileges on a device.<\/li>\n<li><strong><a href=\"https:\/\/thehackernews.com\/2025\/02\/apple-patches-actively-exploited-ios.html\" rel=\"noopener nofollow\" target=\"_blank\">CVE-2025-24200<\/a><\/strong> (CVSS score: 4.6) &#8211; An authorization issue in the Accessibility component could enable a malicious actor to disable USB Restricted Mode on a locked device as part of a cyber physical attack.<\/li>\n<li><strong><a href=\"https:\/\/thehackernews.com\/2025\/03\/apple-releases-patch-for-webkit-zero.html\" rel=\"noopener nofollow\" target=\"_blank\">CVE-2025-24201<\/a><\/strong> (CVSS score: 8.8) &#8211; An out-of-bounds write issue in the WebKit component could allow an attacker to craft malicious web content that breaks out of the Web Content sandbox.<\/li>\n<\/ul>\n<div class=\"dog_two clear\"><center class=\"cf\"><a href=\"https:\/\/thehackernews.uk\/drata-3\" rel=\"nofollow noopener sponsored\" target=\"_blank\" title=\"Cybersecurity\"><img fetchpriority=\"high\" decoding=\"async\" class=\"lazyload\" alt=\"Cybersecurity\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEijTNtDDOmDKhDTrDKP1WpMscmbgulsaA5-BbiS52ptfAqihfsPabTKm9AfB7rDflm2sTi0_GzzM3eAPsXxoHG2Llag9-UE77JP0xnlHmqsPVcx5cKmHUnT-ZTMuddvjWulHbwDTz5F92dt5EZpz88oJCIOUBwkXbWPk10KiiMWPqgSxhyphenhyphenXQTDTFZ1LTaF5\/s728-e300\/drata-3-d.png\" width=\"727\" height=\"90\"\/><\/a><\/center><\/div>\n<p>The updates are now available for the following operating system versions:<\/p>\n<p>The fixes apply to the following devices:<\/p>\n<ul>\n<li>iOS 15.8.4 and iPadOS 15.8.4 &#8211; This includes iPhone 6s (all models), iPhone 7 (all models), iPhone SE (1st generation), iPad Air 2, iPad mini (4th generation), and iPod touch (7th generation).<\/li>\n<li>iOS 16.7.11 and iPadOS 16.7.11 &#8211; This includes iPhone 8, iPhone 8 Plus, iPhone X, iPad 5th generation, iPad Pro 9.7-inch, and iPad Pro 12.9-inch 1st generation.<\/li>\n<li>iPadOS 17.7.6 &#8211; This includes iPad Pro 12.9-inch 2nd generation, iPad Pro 10.5-inch, and iPad 6th generation.<\/li>\n<\/ul>\n<div class=\"dog_two clear\"><center class=\"cf\"><a href=\"https:\/\/thehackernews.uk\/zscaler-inside-d\" rel=\"nofollow noopener sponsored\" target=\"_blank\" title=\"Cybersecurity\"><img decoding=\"async\" class=\"lazyload\" alt=\"Cybersecurity\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjRFO5s2w2a-LYExVqmIzfz6CnCaWYIL8AQm2htTkuz9tueMoNcuhrPw0p-_fT9T5bOK9BonkBRKORSMcMUDyBSxRV1iT6whGPaUFHaJ6AiMmFzK5SQbYPumrOaibXKLYAo2i6Y237CYFzMKtqeMFzUFbVEb4ZRBRNQDz52duWN4i2gyE0YwRJipkSYSEbB\/s728-e100\/zz-d.png\" width=\"727\" height=\"90\"\/><\/a><\/center><\/div>\n<p>This development comes as Apple released <a href=\"https:\/\/support.apple.com\/en-us\/122371\" rel=\"noopener nofollow\" target=\"_blank\">iOS 18.4 and iPadOS 18.4<\/a> to address 62 flaws, <a href=\"https:\/\/support.apple.com\/en-us\/122373\" rel=\"noopener nofollow\" target=\"_blank\">macOS Sequoia 15.4<\/a> to fix 131 flaws, <a href=\"https:\/\/support.apple.com\/en-us\/122377\" rel=\"noopener nofollow\" target=\"_blank\">tvOS 18.4<\/a> to resolve 36 flaws, <a href=\"https:\/\/support.apple.com\/en-us\/122378\" rel=\"noopener nofollow\" target=\"_blank\">visionOS 2.4<\/a> to patch 38 flaws, and <a href=\"https:\/\/support.apple.com\/en-us\/122379\" rel=\"noopener nofollow\" target=\"_blank\">Safari 18.4<\/a> to fix 14 flaws.<\/p>\n<p>Although none of the newly disclosed vulnerabilities have been actively exploited, users are advised to update their devices to the latest version to protect against potential threats.<\/p>\n<p><\/p>\n<div class=\"cf note-b\">If you found this article interesting, follow us on <a href=\"https:\/\/twitter.com\/thehackersnews\" rel=\"noopener nofollow\" target=\"_blank\">Twitter <i class=\"icon-font icon-twitter\">\uf099<\/i><\/a> and <a href=\"https:\/\/www.linkedin.com\/company\/thehackernews\/\" rel=\"noopener nofollow\" target=\"_blank\">LinkedIn<\/a> for more exclusive content.<\/div>\n<\/div>\n<p><script async src=\"\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><br \/>\n<br \/>\n<br \/><a href=\"https:\/\/thehackernews.com\/2025\/04\/apple-backports-critical-fixes-for-3.html\" rel=\"nofollow noopener\" target=\"_blank\">Source Link<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\ue802Apr 01, 2025\ue804Ravie LakshmananMobile Security \/ Vulnerability Apple has released patches for three vulnerabilities that are being actively exploited in the wild, making them available for older models and previous&#8230;<\/p>\n","protected":false},"author":19,"featured_media":12760,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22],"tags":[46,39,32,31,33,34,35,40,36,37,42,44,43,41,38,45],"class_list":["post-12759","post","type-post","status-publish","format-standard","has-post-thumbnail","category-cybersecurity","tag-computer-security","tag-cyber-attacks","tag-cyber-news","tag-cyber-security-news","tag-cyber-security-news-today","tag-cyber-security-updates","tag-cyber-updates","tag-data-breach","tag-hacker-news","tag-hacking-news","tag-how-to-hack","tag-information-security","tag-network-security","tag-ransomware-malware","tag-software-vulnerability","tag-the-hacker-news"],"jetpack_featured_media_url":"https:\/\/fusionmindlabs.com\/blogs\/wp-content\/uploads\/sites\/9\/2025\/04\/ios.jpg","_links":{"self":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/12759","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/users\/19"}],"replies":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/comments?post=12759"}],"version-history":[{"count":1,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/12759\/revisions"}],"predecessor-version":[{"id":12761,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/12759\/revisions\/12761"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media\/12760"}],"wp:attachment":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media?parent=12759"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/categories?post=12759"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/tags?post=12759"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}