Apple WebKit Zero-Day Vulnerability Actively Exploit in High Profile Cyber Attacks
\n \t
\n
<\/BR>
\n
\n \t
\n
<\/BR><\/p>\n
Apple has released emergency security updates addressing a critical zero-day vulnerability in its WebKit browser engine, identified as CVE-2025-24201, which has been actively exploited in targeted attacks. <\/p>\n
The flaw, described as an out-of-bounds write issue, could enable attackers to craft malicious web content capable of breaking out of the Web Content sandbox, potentially leading to unauthorized actions on affected devices.<\/p>\n
\u201cMaliciously crafted web content may be able to break out of Web Content sandbox, An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions.\u201d Apple Stated<\/a>.<\/p>\n The vulnerability affects a wide range of Apple products, including:<\/p>\n Apple\u2019s security advisory noted that the vulnerability \u201cmay have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.\u201d <\/p>\n The company implemented improved checks to prevent unauthorized actions, marking this release as a supplementary fix following an earlier mitigation provided in the iOS 17.2 update.<\/p>\n This latest patch is Apple\u2019s third response to actively exploited zero-day vulnerabilities this year, following earlier patches for CVE-2025-24085 <\/a>in January and CVE-2025-24200<\/a> in February.<\/p>\n Apple has not disclosed details regarding the discovery of the flaw, the attackers\u2019 identities, or the targeted victims. Users are strongly advised to update their devices immediately to mitigate potential risks associated with this vulnerability.<\/p>\n Find this Story Interesting! Follow us on\u00a0Google News<\/a>,\u00a0LinkedIn<\/a>, and\u00a0X<\/a>\u00a0to Get More Instant Updates<\/strong><\/p>\n The post Apple WebKit Zero-Day Vulnerability Actively Exploit in High Profile Cyber Attacks<\/a> appeared first on Cyber Security News<\/a>.<\/p>\n<\/div>\n\n