CVE-2025-24201 is an out-of-bounds write vulnerability in Apple operating systems that could allow malicious web content to escape the Web Content sandbox. The issue was addressed with improved checks to prevent unauthorized actions and is fixed in visionOS 2.3.2, iOS 18.3.2, iPadOS 18.3.2, and macOS Sequoia 15.3.2. This vulnerability is a supplementary fix for an attack blocked in iOS 17.2 and may have been exploited in a highly sophisticated targeted attack on earlier iOS versions.