Apple Fixes Zero-Day Vulnerability Actively Exploited in iOS

⚡ TL;DR | Go Straight to the Apple Vulnerability Audit Report

Apple has released a series of new software updates addressing a number of vulnerabilities, including an exploited zero-day vulnerability, affecting iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. The zero-day vulnerability could allow a malicious application to elevate privileges. We have added a new report to Lansweeper to help you locate vulnerable devices.

Apple Vulnerability CVE-2025-24085

The security updates Apple released address multiple issues and bugs, the most dangerous being a zero-day vulnerability tracked as CVE-2025-24085 that may already have been actively exploited against older versions of iOS. It is a privilege escalation security flaw in Apple’s Core Media framework that could allow a malicious application to elevate privileges.

Update Vulnerable Apple Devices

Apple has addressed this zero-day vulnerability with improved memory management in it’s latest versions of iOS, iPadOS, macOS Sequoia, watchOS, tvOS, and visionOS. You can find an overview of all patches on Apple’s security page as well as more information on how to get the latest security updates. You can also find all fixed versions listed below.

Name and information link	Available for
iOS 18.3 and iPadOS 18.3	iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later
macOS Sequoia 15.3	macOS Sequoia
watchOS 11.3	Apple Watch Series 6 and later
tvOS 18.3	Apple TV HD and Apple TV 4K (all models)
visionOS 2.3	Apple Vision Pro

Discover Vulnerable Apple Devices

Our technical team has created a new audit report to help you locate vulnerable Apple devices in your network. This way you have an actionable list of iOS, iPadOS, and macOS devices that are at risk and still need the new updates. You can get the report via the link below.