As part of this batch of software updates, Apple also released several patches fixing security bugs, including a zero-day bug that “may have been actively exploited” — meaning hackers were using it to compromise devices — against users with iPhones running software older than iOS 17.2, which was released in December 2023.

Apple has fixed a privilege escalation flaw in its Core Media framework that was used by hackers to attack iPhones running older versions of iOS.

Among the numerous security updates, the iOS/iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3, and visionOS 2.3 updates patch a CoreMedia zero-day flaw. Exploitation of CVE-2025-24085 could allow a malicious application to access privileged parts of the system and was fixed with improved memory management.

The use-after-free flaw allows privilege escalation in affected media applications running on Apple’s Core Media framework.

Apple regularly lists resolved vulnerabilities for iPhone, iPad, and Mac after each software update. Right on cue, the company