Apple Releases iOS 18.3.2, macOS 15.3.2 Updates to Fix Security Flaw That Enabled ‘Extremely Sophisticated Attack’

Apple on Tuesday rolled out necessary safety patches for iOS 18, iPadOS 18, and macOS Sequoia. The corporate says that the newest software program releases embody a repair for a safety vulnerability that was utilized by hackers to focus on some people. That is the third time this yr that Apple has issued safety updates for a critical safety flaw. Customers can replace eligible iPhone, iPad, and Mac computer systems to the newest variations, which addresses the flaw in Apple’s browser engine.

iOS 18.3.2, iPadOS 18.3.2 and macOS 15.3.2 Repair Severe WebKit Safety Flaw

The corporate’s release notes for iOS 18.3.2 and iPadOS 18.3.2 reveal that the updates embody a repair for one notable safety flaw that impacts WebKit, the browser engine used on Safari. This zero-day safety flaw (CVE-2025-24201) has additionally been resolved with the macOS Sequoia 15.3.2 and visionOS 2.3.2 updates.

Apple says that the WebKit safety vulnerability allowed maliciously crafted internet content material to flee the Net Content material sandbox. The corporate explains that this out-of-bounds difficulty might enable hackers to achieve entry to a person’s system and carry out unauthorised actions.

It is also value noting that Apple has stated it’s conscious that the safety flaw “could have been exploited in an especially refined assault towards particular focused people on variations of iOS earlier than iOS 17.2.”. The flaw was first mounted within the iOS 17.2 update that rolled out to customers in December 2023.

Final month, Apple released iOS 18.3.1 and iPadOS 18.3.1 with a repair for a safety flaw that allowed attackers to disable USB Restricted Mode on a locked machine. On the time, the corporate stated that it was conscious the vulnerability was used to focus on particular individuals, utilizing an extraordinarily refined assault.

The corporate additionally launched iOS 18.3, iPadOS 18.3.1, and macOS 15.3 with fixes for a safety flaw that allowed a malicious utility to achieve elevated privileges on a person’s machine. Apple said that the flaw was used to focus on customers with units working iOS 17.2 or older variations of its iOS working system.