Apple has released software updates to address several security flaws across its portfolio, including a zero-day vulnerability that it said has been exploited in the wild.

The vulnerability, tracked as CVE-2025-24085, has been described as a use-after-free bug in the Core Media component that could permit a malicious application already installed on a device to elevate privileges.

Systems Affected

  • iOS 18.3 and iPadOS 18.3 – iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later
  • macOS Sequoia 15.3 – Macs running macOS Sequoia
  • tvOS 18.3 – Apple TV HD and Apple TV 4K (all models)
  • visionOS 2.3 – Apple Vision Pro
  • watchOS 11.3 – Apple Watch Series 6 and later

What You Should Do
With CVE-2025-24085 tagged as actively exploited, users of Apple devices are recommended to apply the patches to safeguard against potential threats.

Questions?  Reach out to a member of the BMT Support Team!