Critical fault at Apple, the updates available

Tuesday evening, Apple published a series of intermediate updates for its platforms: iOS/iPados 18.6, macOS 15.6, Watchos 11.6 and TVOS 18.6. Nevertheless, These versions are not really important to bring on the functional level, but they correct various bugs and security concerns.

Now, among these, we learned yesterday that there was a 0-day flaw. Furthermore, As Bleeping Computer indicates, vulnerability-stamped CVE-2025-6558-is critical, with a CVSS score of 8.8 by 10. Therefore, The fault lies in the incorrect validation of an unreliable input in the angle graphical abstraction layer (native Almost. Moreover, graphics layer engine). The latter takes care of processing GPU commands. translating calls from the OpenGl API to other graphic APIs, according to the platform used (Direct3D, Metal, Vulkan or OpenGL).

Used. the flaw allows remote execution of an arbitrary code, without any other user intervention than the opening of a specially designed web page. The exploitation makes it possible to partly escape the browser sandbox.

The flaw was discovered by two researchers from the Threat Analysis Group from Google. Vlad Stolyarov and Clément Lecigne. Residing in the angle engine, it is therefore found in Chrome, in which it was corrected on July 15 by Google. The company, in a security bulletin, has also confirmed that the flaw was already exploited.

For its part. Apple gives few details, just indicating that ” The treatment of malicious web content can cause unexpected safari blocking ».

The fault being actively used, it is recommended to update the critical fault apple, updates available devices as quickly as possible.