iPhone users should update to iOS 18.3.2 immediately to fix 0-day exploited in ‘extremely sophisticated attack’

On Tuesday, with iOS 18.3.2, Apple rolled out a fix for a severe zero-day flaw affecting nearly all supported iPhone and iPad models, warning that it might have been leveraged in “an extremely sophisticated attack targeting specific individuals” on older iOS versions.
The flaw, identified as CVE-2025-24201, lurks in Webkit—the engine powering Safari and all other browsers built for iPhones and iPads. Impacted devices include the iPhone XS and newer, iPad Pro 13-inch, iPad Pro