Apple addressed the seventh actively exploited zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-24085 | Use-After-Free Privilege Escalation in Apple iOS, iPadOS, macOS and Other Platforms | 10.0 | 18% | KEV | KEV |
| CVE-2025-24200 | Incorrect Authorization in Apple iOS/iPadOS Lets Attackers Disable USB Restricted Mode | 6.1 | 4% | KEV | KEV |
| CVE-2025-24201 | WebKit Out-of-Bounds Write Sandbox Escape in Apple iOS, Safari, and macOS | 10.0 | 4% | KEV | KEV |
CVE-2025-31200+1 related CVE | Memory Corruption in Apple iOS, iPadOS, macOS Audio Processing Enables Code Execution | 9.8 | 21% | KEVPoC ×2 | KEV |
| CVE-2025-43200 | Apple iCloud Link media-processing logic flaw exploited in targeted attacks | 4.2 | 1% | KEV | KEV |
| CVE-2025-43300 | Actively Exploited Out-of-Bounds Write in Apple iOS/iPadOS/macOS Image I/O | 10.0 | 65% | KEVPoC | KEV |
From the original article
1 min read at securityaffairs.com
Apple addressed a vulnerability impacting iOS, iPadOS, and macOS that it is under active exploitation in the wild. Apple addressed an actively exploited zero-day, tracked as CVE-2025-43300, in iOS, iPadOS, and macOS. The vulnerability is zero-day out-of-bounds write issue that resides in the ImageIO framework , an attacker could exploit it to cause memory corruption when processing a malicious image.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.