Apple Warns of Three 0-Day Vulnerabilities Actively Exploited in Attacks

Apple issued an urgent advisory for three actively exploited zero-day vulnerabilities affecting iOS, iPadOS, macOS, watchOS, tvOS and visionOS: CVE-2025-24200 (USB Restricted Mode bypass via physical access), CVE-2025-24201 (WebKit out-of-bounds write enabling sandbox escape), and CVE-2025-24085 (CoreMedia use-after-free leading to privilege escalation). Apple has released patches across platforms and users are urged to update immediately and follow mitigations such as enabling Lockdown Mode and avoiding untrusted apps.