Name of the Vulnerable Software and Affected Versions:

visionOS versions prior to 2.3.2

iOS versions prior to 18.3.2

iPadOS versions prior to 18.3.2

macOS Sequoia versions prior to 15.3.2

Safari versions prior to 18.3.1

Description:

A critical vulnerability in the WebKit browser engine allows attackers to escape the Web Content sandbox, potentially leading to the execution of malicious code. This issue has been exploited in extremely sophisticated attacks against specific targeted individuals. The vulnerability is related to an out-of-bounds write issue when processing web content.

Recommendations:

Update to visionOS 2.3.2 or later to fix the vulnerability.

Update to iOS 18.3.2 or later to fix the vulnerability.

Update to iPadOS 18.3.2 or later to fix the vulnerability.

Update to macOS Sequoia 15.3.2 or later to fix the vulnerability.

Update to Safari 18.3.1 or later to fix the vulnerability.