Apple Addresses First Zero-Day Vulnerability of 2025

🔒✨ Apple addresses first zero-day vulnerability of 2025 affecting multiple devices. Apple has released security updates to fix a privilege escalation flaw, tracked as CVE-2025-24085, in its Core Media framework, which may have been actively exploited against iOS versions prior to 17.2. The vulnerability impacts a wide range of devices, including iPhone XS and later, various iPad models, and Apple Watch Series 6 and newer. Users are strongly advised to install the updates promptly to mitigate potential ongoing attacks. This marks the first zero-day fix of the year, following a record number of vulnerabilities patched in 2023. Apple has not disclosed details about the attacks or the researcher who discovered the flaw.

Source

Original