Overview

• iOS 18.4 resolves 62 security vulnerabilities, including critical issues in WebKit, the Kernel, and CoreMedia, which could allow malicious code execution and privilege escalation.
• Key vulnerabilities include CVE-2025-30432 in the Kernel, enabling passcode attempts on locked devices, and CVE-2025-24208 in WebKit, exposing users to cross-site scripting attacks.
• Apple has not reported real-world exploitation of these vulnerabilities but emphasizes the urgency of updating due to the public disclosure of fixes.
• Updates for older devices, such as iOS 16.7.11 and iOS 15.8.4, address similar vulnerabilities, ensuring broader ecosystem security.
• Additional updates for macOS, tvOS, and visionOS have also been released, reflecting Apple's comprehensive approach to safeguarding its platforms.