Apple fixes this year’s first actively exploited zero-day bug

Apple released security updates addressing CVE-2025-24085, an actively exploited privilege escalation zero-day in the Core Media framework that affects iPhone, iPad, Mac, Apple TV, Apple Watch and visionOS devices; Apple confirmed reports of in-the-wild exploitation and recommends immediate installation of updates, while not attributing the discovery or publishing attack details.