{"id":2133,"date":"2025-01-28T05:11:56","date_gmt":"2025-01-28T05:11:56","guid":{"rendered":"https:\/\/fusionmindlabs.com\/blogs\/2025\/01\/28\/apple-patches-zero-day-exploits-on-iphones-macs-more\/"},"modified":"2025-01-28T05:11:57","modified_gmt":"2025-01-28T05:11:57","slug":"apple-patches-zero-day-exploits-on-iphones-macs-more","status":"publish","type":"post","link":"https:\/\/fusionmindlabs.com\/blogs\/apple-patches-zero-day-exploits-on-iphones-macs-more\/","title":{"rendered":"Apple Patches Zero-Day Exploits on iPhones, Macs &#038; More"},"content":{"rendered":"\n<\/p>\n<p><strong>Apple Releases Software Updates to Address Security Flaws<\/strong><\/p>\n<p><strong>January 28, 2025<\/strong><\/p>\n<p><strong>By Ravie Lakshmanan<\/strong><\/p>\n<p>Apple has released software updates to address several security flaws across its portfolio, including a zero-day vulnerability that it said has been exploited in the wild.<\/p>\n<p><strong>The Vulnerability<\/strong><\/p>\n<p>The vulnerability, tracked as CVE-2025-24085, has been described as a use-after-free bug in the Core Media component that could permit a malicious application already installed on a device to elevate privileges.<\/p>\n<p><strong>Exploitation<\/strong><\/p>\n<p>&quot;Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2,&quot; the company said in a terse advisory.<\/p>\n<p><strong>Affected Devices and Operating System Versions<\/strong><\/p>\n<p>The issue has been addressed with improved memory management in the following devices and operating system versions:<\/p>\n<ul>\n<li><strong>iOS 18.3 and iPadOS 18.3<\/strong>: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later<\/li>\n<li><strong>macOS Sequoia 15.3<\/strong>: Macs running macOS Sequoia<\/li>\n<li><strong>tvOS 18.3<\/strong>: Apple TV HD and Apple TV 4K (all models)<\/li>\n<li><strong>visionOS 2.3<\/strong>: Apple Vision Pro<\/li>\n<li><strong>watchOS 11.3<\/strong>: Apple Watch Series 6 and later<\/li>\n<\/ul>\n<p><strong>Current Status<\/strong><\/p>\n<p>As is typically the case, there are currently no details on how the vulnerability may have been exploited in real-world attacks, by whom, and who may have been targeted. Apple has yet to attribute the discovery of the shortcoming to a security researcher.<\/p>\n<p><strong>Additional Security Flaws<\/strong><\/p>\n<p>The updates also address five security flaws in AirPlay, all reported by Oligo Security researcher Uri Katz, that could be exploited by an attacker to cause unexpected system termination, denial-of-service (DoS), or arbitrary code execution under certain conditions.<\/p>\n<p><strong>Other Vulnerabilities<\/strong><\/p>\n<p>Google&#8217;s Threat Analysis Group (TAG) has been credited with discovering and reporting three vulnerabilities in the CoreAudio component (CVE-2025-24160, CVE-2025-24161, and CVE-2025-24163) that may lead to an unexpected app termination when parsing a specially crafted file.<\/p>\n<p><strong>Recommendation<\/strong><\/p>\n<p>With CVE-2025-24085 tagged as actively exploited, users of Apple devices are recommended to apply the patches to safeguard against potential threats.<\/p>\n<p><strong>Stay Informed<\/strong><\/p>\n<p>Follow us on Twitter and LinkedIn to read more exclusive content we post.<\/p>\n\n<br \/><a href=\"https:\/\/thehackernews.com\/2025\/01\/apple-patches-actively-exploited-zero.html\" rel=\"nofollow noopener\" target=\"_blank\">Source Link<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Apple Releases Software Updates to Address Security Flaws January 28, 2025 By Ravie Lakshmanan Apple has released software updates to address several security flaws across its portfolio, including a zero-day&#8230;<\/p>\n","protected":false},"author":19,"featured_media":2134,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22],"tags":[46,39,32,31,33,34,35,40,36,37,42,44,43,41,38,45],"class_list":["post-2133","post","type-post","status-publish","format-standard","has-post-thumbnail","category-cybersecurity","tag-computer-security","tag-cyber-attacks","tag-cyber-news","tag-cyber-security-news","tag-cyber-security-news-today","tag-cyber-security-updates","tag-cyber-updates","tag-data-breach","tag-hacker-news","tag-hacking-news","tag-how-to-hack","tag-information-security","tag-network-security","tag-ransomware-malware","tag-software-vulnerability","tag-the-hacker-news"],"jetpack_featured_media_url":"https:\/\/fusionmindlabs.com\/blogs\/wp-content\/uploads\/sites\/9\/2025\/01\/1738041117_apple.png","_links":{"self":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/2133","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/users\/19"}],"replies":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/comments?post=2133"}],"version-history":[{"count":1,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/2133\/revisions"}],"predecessor-version":[{"id":2135,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/2133\/revisions\/2135"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media\/2134"}],"wp:attachment":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media?parent=2133"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/categories?post=2133"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/tags?post=2133"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}