Apple on Tuesday rolled out vital safety patches for iOS 18, iPadOS 18, and macOS Sequoia. The corporate says that the most recent software program releases embody a repair for a safety vulnerability that was utilized by hackers to focus on some people. That is the third time this yr that Apple has issued safety updates for a severe safety flaw. Customers can replace eligible iPhone, iPad, and Mac computer systems to the most recent variations, which addresses the flaw in Apple’s browser engine.

iOS 18.3.2, iPadOS 18.3.2 and macOS 15.3.2 Repair Severe WebKit Safety Flaw

The corporate’s release notes for iOS 18.3.2 and iPadOS 18.3.2 reveal that the updates embody a repair for one notable safety flaw that impacts WebKit, the browser engine used on Safari. This zero-day safety flaw (CVE-2025-24201) has additionally been resolved with the macOS Sequoia 15.3.2 and visionOS 2.3.2 updates.

Apple says that the WebKit safety vulnerability allowed maliciously crafted internet content material to flee the Internet Content material sandbox. The corporate explains that this out-of-bounds situation might enable hackers to realize entry to a consumer’s system and carry out unauthorised actions.

It is also price noting that Apple has mentioned it’s conscious that the safety flaw “might have been exploited in a particularly subtle assault towards particular focused people on variations of iOS earlier than iOS 17.2.”. The flaw was first fastened within the iOS 17.2 update that rolled out to customers in December 2023.

Final month, Apple released iOS 18.3.1 and iPadOS 18.3.1 with a repair for a safety flaw that allowed attackers to disable USB Restricted Mode on a locked machine. On the time, the corporate mentioned that it was conscious the vulnerability was used to focus on particular individuals, utilizing an extraordinarily subtle assault.

The corporate additionally launched iOS 18.3, iPadOS 18.3.1, and macOS 15.3 with fixes for a safety flaw that allowed a malicious utility to realize elevated privileges on a consumer’s machine. Apple said that the flaw was used to focus on customers with units operating iOS 17.2 or older variations of its iOS working system.