Apple patches first exploited iOS Zero-Day of 2025.Apple has released security updates to fix this year's first zero-day vulnerability, tagged as actively exploited in attacks targeting iPhone users. The zero-day tracked as [CVE-2025-24085], is a privilege escalation security flaw in Apple's Core Media framework.
https://support.apple.com/en-us/100100
#apple #update #ios #zeroday #coremedia #it #security #privacy #engineer #media #tech #news
![[ImageSource: Shutterstock]
The updates also address five security flaws in AirPlay, all reported by Oligo Security researcher Uri Katz, that could be exploited by an attacker to cause unexpected system termination, denial-of-service (DoS), or arbitrary code execution under certain conditions.
Google's Threat Analysis Group (TAG) has been credited with discovering and reporting three vulnerabilities in the CoreAudio component (CVE-2025-24160, CVE-2025-24161 and CVE-2025-24163) that may lead to an unexpected app termination when parsing a specially crafted file.
Apple has fixed the security issues in the following devices and operating system versions.
• iOS 18.3 and iPadOS 18.3 - iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later
• macOS Sequoia 15.3 - Macs running macOS Sequoia
• tvOS 18.3 - Apple TV HD and Apple TV 4K (all models)
• visionOS 2.3 - Apple Vision Pro
• watchOS 11.3 - Apple Watch Series 6 and later](https://nerdculture.de/system/media_attachments/files/113/917/894/741/773/314/original/a4502e320d7426db.png "[ImageSource: Shutterstock]
The updates also address five security flaws in AirPlay, all reported by Oligo Security researcher Uri Katz, that could be exploited by an attacker to cause unexpected system termination, denial-of-service (DoS), or arbitrary code execution under certain conditions.
Google's Threat Analysis Group (TAG) has been credited with discovering and reporting three vulnerabilities in the CoreAudio component (CVE-2025-24160, CVE-2025-24161 and CVE-2025-24163) that may lead to an unexpected app termination when parsing a specially crafted file.
Apple has fixed the security issues in the following devices and operating system versions.
• iOS 18.3 and iPadOS 18.3 - iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later
• macOS Sequoia 15.3 - Macs running macOS Sequoia
• tvOS 18.3 - Apple TV HD and Apple TV 4K (all models)
• visionOS 2.3 - Apple Vision Pro
• watchOS 11.3 - Apple Watch Series 6 and later")
Apple security releases - Apple Support
This document lists security updates and Rapid Security Responses for Apple software.Apple Support
