Apple Products Remote Code Execution Vulnerability

A vulnerability has been identified in Apple Products. A remote attacker could exploit this vulnerability to trigger remote code execution and denial of service on the targeted system.

Note:

CVE-2025-24201 is being exploited in the wild, which have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.

[Updated on 2025-03-14]

Updated Description and Related Links.

Impact

• Remote Code Execution
• Denial of Service

System / Technologies affected

• Versions prior to Safari 18.3.1
• Versions prior to iOS 18.3.2 and iPadOS 18.3.2
• Versions prior to macOS Sequoia 15.3.2
• Versions prior to visionOS 2.3.2

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

• Safari 18.3.1
• iOS 18.3.2 and iPadOS 18.3.2
• MacOS Sequoia 15.3.2
• VisionOS 2.3.2

Vulnerability Identifier

• CVE-2025-24201

Source

• Apple

Related Link

• https://support.apple.com/en-us/122285
• https://support.apple.com/en-us/122281
• https://support.apple.com/en-us/122283
• https://support.apple.com/en-us/122284
• https://www.cisa.gov/news-events/alerts/2025/03/13/cisa-adds-two-known-exploited-vulnerabilities-catalog