Cyber Security News

U.S. CISA adds Apple iOS, iPadOS, and macOS flaw to its Known Exploited Vulnerabilities catalog

Cyware
U.S. CISA adds Apple iOS, iPadOS, and macOS flaw to its Known Exploited Vulnerabilities catalog

Apple addressed a zero-day vulnerability (CVE-2025-43300) in iOS, iPadOS, and macOS that could lead to memory corruption through malicious images. The fix came after reports of sophisticated exploits targeting specific individuals. #CVE202543300 #AppleVulnerability

Keypoints

  • The CVE-2025-43300 flaw is an out-of-bounds write issue in Apple’s ImageIO framework.
  • Exploitation of this vulnerability could cause memory corruption on affected devices.
  • Apple released security updates for iOS 18.6.2, iPadOS 18.6.2, macOS Ventura 13.7.8, macOS Sonoma 14.7.8, and macOS Sequoia 15.6.1.
  • Federal agencies are mandated to fix this vulnerability by September 11, 2025, according to CISA directives.
  • Experts advise organizations to review and address vulnerabilities listed in the KEV catalog to protect their infrastructure.

Read More: https://securityaffairs.com/181406/security/u-s-cisa-adds-apple-ios-ipados-and-macos-flaw-to-its-known-exploited-vulnerabilities-catalog.html