Apple patches 0-day exploited in “extremely sophisticated attack”

Quick Summary:

0-day exploited by maliciously crafted Web content to break out of security sandbox.

The vulnerability stems from a bug that wrote to out-of-bounds memory locations.“Impact: Maliciously crafted web content may be able to break out of Web Content sandbox,” Apple wrote in a bare-bones advisory.“This is a supplementary fix for an attack that was blocked in iOS 17.2.(Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.

The vulnerability, tracked as CVE-2025-24201, resides in Webkit, the browser engine driving Safari and all other browsers developed for iPhones and iPads.

---

More Pictures

---

Read Quick SummarySave Time

or

Article Details

Author / Journalist: Dan Goodin

Category: Technology

Markets: United StatesMali

Topics: IPadOS Zeroday Apple Apple Security IOS Iphone Ipad

Source Website Secure: Yes (HTTPS)

News Sentiment: Negative

Fact Checked: Legitimate

Article Type: News Report

Published On: 2025-03-11 @ 20:26:11 (23 hours ago)

News Timezone: GMT -5:00

News Source URL: arstechnica.com

Language: English

Article Length: 183 words

Reading Time: 2 minutes read

Sentences: 24 lines

Sentence Length: 8 words per sentence (average)

Platforms: Desktop Web, Mobile Web, iOS App, Android App

Copyright Owner: © Ars Technica

News ID: 26904670

View Article Analysis

About Ars Technica

Main Topics: Technology

Official Website: arstechnica.com

Update Frequency: 9 posts per day

Year Established: 1998

Headquarters: United States

News Last Updated: 19 hours ago

Coverage Areas: United States

Ownership: Independent Company

Publication Timezone: GMT -5:00

Content Availability: Worldwide

News Language: English

RSS Feed: Available (XML)

API Access: Available (JSON, REST)

Website Security: Secure (HTTPS)

Publisher ID: #32

Publisher Details

Frequently Asked Questions