We know it's Friday, but we still have one thing for your task list: update your Apple devices. Apple published a series of updates for new and old devices on Monday, and even if you do not get new features, there are tonnes of safety fixes waiting to make your systems safe.
In all, Apple has sent nine updates to the operating system and an update of Garageband. The most urgent problem is a zero-day defect in Coremedia which has been exploited in the wild. The problem, which was corrected in iOS 18.3, iPados 18.3, MacOS Sequoia 15.3, Watchos 11.3, TVOS 18.3 and Visionos 2.3, could allow a malicious application to access the “privileged parts of the system”.
But although this is the most immediate threat to your device, this is not the only reason to go crush this update button. In all, there are dozens of safety corrections to correct vulnerabilities in all corners of the system. Here are some of the important security updates awaiting your device:
Difficulty
- Available for: iOS 18.3, iPados 18.3, macOS Sequoia 15.3, Watchos 11.3, TVOS 18.3, Visionos 2.3
- Impact: an attacker in a privileged position may be able to make a service of service
- Description: The problem was resolved with better memory management.
- CVE-2025-24131: Uri Katz (Oligo security)
Core
- Available for: iOS 18.3, iPados 18.3, macOS Sequoia 15.3, Watchos 11.3, TVOS 18.3
- Impact: a malicious application may be able to obtain root privileges
- Description: A problem of authorizations has been solved with additional restrictions.
- CVE-2025-24107: An anonymous researcher
Launch service
- Available for: iOS 18.3, iPados 18.3, macOS Sequoia 15.3, Watchos 11.3, Visionos 2.3
- Impact: an application can be able to fingerprints the user
- Description: This problem has been resolved with an improvement in sensitive information.
- CVE-2025-24117: Michael (cookie) Thomas ( @ cookie @ social.lol)
Stage kit
- Available for: iOS 18.3, iPados 18.3, macOS Sequoia 15.3, MacOS Ventura 13.7.3, MacOS Sonoma 14.7.3, Watchos 11.3, Tvos 18.3, Visionos 2.3
- Impact: An analysis of a file can lead to disclosure of user information
- Description: Outside limits was treated with an improved limits verification.
- CVE-2025-24149: Michael Deplante (@izobashi) from Trend Micro Zero Day Initiative
Webkit
- Available for: iOS 18.3, iPados 18.3, macOS Sequoia 15.3, MacOS Ventura 13.7.3, MacOS Sonoma 14.7.3, Watchos 11.3, Tvos 18.3, Visionos 2.3
- Impact: Web content processing can lead to denial of service
- Description: The problem was resolved with better memory management.
- Webkit Bugzilla: 283889
- CVE-2025-24158: Q1IQ (@ q1iqf) from Nus Curiosity and P1UMER (@ p1umer) of Singapore Imperial Global
Webkit
- Available for: iOS 18.3, iPados 18.3, macOS Sequoia 15.3, MacOS Ventura 13.7.3, MacOS Sonoma 14.7.3, Watchos 11.3, Tvos 18.3, Visionos 2.3
- Impact: Maliciously treatment of artisanal web content can lead to an unexpected process accident
- Description: This problem was resolved by improving state management.
- Webkit Bugzilla: 284159
- CVE-2025-24162: LINJY DE HKUS3LAB and CHLUO DE WHUSECLAB
To update your devices, open the Settings (or System Settings on a Mac) application, then General And Software update.
