{"id":9579,"date":"2025-03-12T05:28:26","date_gmt":"2025-03-12T05:28:26","guid":{"rendered":"https:\/\/fusionmindlabs.com\/blogs\/apple-fixes-zero-day-webkit-vulnerability\/"},"modified":"2025-03-12T05:28:28","modified_gmt":"2025-03-12T05:28:28","slug":"apple-fixes-zero-day-webkit-vulnerability","status":"publish","type":"post","link":"https:\/\/fusionmindlabs.com\/blogs\/apple-fixes-zero-day-webkit-vulnerability\/","title":{"rendered":"Apple Fixes Zero-Day WebKit Vulnerability"},"content":{"rendered":"\n<\/p>\n
\n

\ue802<\/i>Mar 12, 2025<\/span>\ue804<\/i>Ravie Lakshmanan<\/span><\/span>Endpoint Security \/ Vulnerability<\/span><\/p>\n<\/div>\n

\n
\n<\/p>\n

<\/a>\n<\/div>\n

On Tuesday, Apple released<\/a> a security update to address a zero-day vulnerability that has been exploited in highly sophisticated attacks.<\/p>\n

The identified vulnerability, assigned the CVE identifier CVE-2025-24201, is associated with the WebKit web browser engine component.<\/p>\n

This vulnerability is characterized as an out-of-bounds write issue, which allows an attacker to create malicious web content that can escape the Web Content sandbox.<\/p>\n

Apple has resolved the issue by implementing improved checks to prevent unauthorized actions, noting that it is a supplementary fix for an attack that was previously blocked in iOS 17.2<\/a>.<\/p>\n

\n

\n
\n\"Cybersecurity\"
\n<\/a>
\n<\/center>\n<\/div>\n

Moreover, Apple acknowledged that this vulnerability may have been exploited in highly sophisticated attacks targeting specific individuals using versions of iOS prior to iOS 17.2.<\/p>\n

However, the advisory does not provide information on whether the vulnerability was discovered by Apple’s security team or reported by an external researcher, nor does it specify when the attacks started, how long they lasted, or who the targets were.<\/p>\n

The security update is available for the following devices and operating system versions:<\/p>\n