Apple Releases iOS 18.3.2, macOS 15.3.2 Updates to Fix Security Flaw That Enabled ‘Extremely Sophisticated Attack’

Apple on Tuesday rolled out vital safety patches for iOS 18, iPadOS 18, and macOS Sequoia. The firm says that the newest software program releases embrace a repair for a safety vulnerability that was utilized by hackers to goal some people. This is the third time this yr that Apple has issued safety updates for a severe safety flaw. Users can replace eligible iPhone, iPad, and Mac computer systems to the newest variations, which addresses the flaw in Apple’s browser engine.

iOS 18.3.2, iPadOS 18.3.2 and macOS 15.3.2 Fix Serious WebPackage Security Flaw

The firm’s launch notes for iOS 18.3.2 and iPadOS 18.3.2 reveal that the updates embrace a repair for one notable safety flaw that impacts WebPackage, the browser engine used on Safari. This zero-day safety flaw (CVE-2025-24201) has additionally been resolved with the macOS Sequoia 15.3.2 and visionOS 2.3.2 updates.

Apple says that the WebPackage safety vulnerability allowed maliciously crafted internet content material to escape the Web Content sandbox. The firm explains that this out-of-bounds concern may enable hackers to acquire entry to a person’s system and carry out unauthorised actions.

It’s additionally value noting that Apple has mentioned it’s conscious that the safety flaw “may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.”. The flaw was first mounted within the iOS 17.2 replace that rolled out to customers in December 2023.

Last month, Apple launched iOS 18.3.1 and iPadOS 18.3.1 with a repair for a safety flaw that allowed attackers to disable USB Restricted Mode on a locked system. At the time, the corporate mentioned that it was conscious the vulnerability was used to goal particular individuals, utilizing an extraordinarily refined assault.

The firm additionally launched iOS 18.3, iPadOS 18.3.1, and macOS 15.3 with fixes for a safety flaw that allowed a malicious utility to acquire elevated privileges on a person’s system. Apple mentioned that the flaw was used to goal customers with gadgets operating iOS 17.2 or older variations of its iOS working system.