Apple closes critical zero-day gap on all devices

With its latest software update, Apple has fixed a serious security vulnerability that allowed attackers to gain extended system rights. All Apple devices are affected – from the iPhone to the Vision Pro.

The iPhone company has released a series of software updates for its entire product range. The focus is on fixing a critical zero-day vulnerability in the Core Media component, which the company claims may have already been actively exploited. The vulnerability affects all Apple operating systems and enables attackers to gain extended system rights through a memory corruption error.

Far-reaching effects

The vulnerability was discovered in the “Core Media” media engine, which is used in all Apple devices. The following are affected:

• iPhones
• iPads
• Mac computer
• Apple TV
• Apple Watch
• Vision Pro

Apple does not provide any information about who discovered the vulnerability or how many users may have been affected.