Apple Backports Zero-Day Patches to Older Devices in Latest Security Update

Apple released critical security updates and backported fixes for multiple vulnerabilities — notably zero-days CVE-2025-24200 (USB Restricted Mode bypass) and CVE-2025-24201 (WebKit sandbox escape) — which were actively exploited prior to patching. Updates span iOS, iPadOS, macOS, watchOS, and tvOS with backports for older versions; other fixes address privilege escalation, font processing, authentication, and various system components. Users are urged to apply updates promptly to mitigate ongoing active exploitation.