CISA Warns of macOS and iOS Vulnerabilities Exploited in Attacks

CISA has flagged three Apple vulnerabilities—two use-after-free bugs and one integer overflow—that are being actively exploited in the wild, potentially enabling arbitrary code execution and kernel privileges across iOS, macOS, iPadOS, Safari, tvOS and watchOS. The agency added the CVEs to its Known Exploited Vulnerabilities catalog and issued a BOD-driven remediation deadline for federal agencies, urging all organizations to apply vendor patches or discontinue vulnerable products immediately.