Apple fixes WebKit zero-day exploited in ‘extremely sophisticated’ attacks

Created on 2025-03-12 08:35, updated on 2025-03-12 08:35, by Cédric Bonhomme
JSON CVE-2025-24201

Apple has released emergency security updates to patch a zero-day bug the company describes as exploited in "extremely sophisticated" attacks.

The vulnerability is tracked as CVE-2025-24201 and was found in the WebKit cross-platform web browser engine used by Apple's Safari web browser and many other apps and web browsers on macOS, iOS, Linux, and Windows.

Related vulnerabilities
Meta
[
  {
    "ref": [
      "https://www.bleepingcomputer.com/news/apple/apple-fixes-webkit-zero-day-exploited-in-extremely-sophisticated-attacks/"
    ]
  }
]