The zero-day bug was found in WebKit, the browser engine powering Safari and other apps, and allowed hackers to break out of WebKit’s protective sandbox with “maliciously crafted web content ...

The vulnerability is tracked as CVE-2025-24201 and was found in the WebKit cross-platform web browser engine used by Apple's Safari web browser and many other apps and web browsers on macOS ...

Apple released a hefty round of security updates for its desktop and mobile products, patching two recent zero-days in older ...

Apple on Tuesday patched a critical zero-day vulnerability in virtually all iPhones and iPad models it supports and said it may have been exploited in “an extremely sophisticated attack against ...

with iOS 17.2 and macOS Sonoma 14.2. It’s unclear which WebKit patch fixed the original vulnerability. So far this year, Apple has fixed three zero-days, which are defined as flaws that were ...

Apple revealed that the flaw is an out-of-bounds write issue affecting the WebKit open source web browser engine that powers Safari, Mail, App Store and many other Apple and Linux ecosystem ...