# MA-1271.022025: MyCERT Advisory - Security Updates - Zero-Day Vulnerability Apple iOS and iPadOS

**Date:** 20 Feb 2025  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-1271.022025  
**Advisory ID:** MA-1271.022025

---

**1.0 Introduction**
Recently, Apple has released emergency security updates to address a zero-day vulnerability in iOS and iPadOS.
**2.0 Impact**
This flaw allows attackers to disable USB Restricted Mode on a locked device, potentially granting unauthorized access to sensitive data.
**3.0 Affected Products**
- iPhone XS and later
- iPad Pro (13-inch)
- iPad Pro 12.9-inch (3rd generation and later)
- iPad Pro 11-inch (1st generation and later)
- iPad Air (3rd generation and later)
- iPad (7th generation and later)
- iPad mini (5th generation and later)
- iPad Pro 12.9-inch 2nd generation, iPad Pro 10.5-inch, and iPad 6th generation
**4.0 Recommendations**
CyberSecurity Malaysia encourages users and administrators to review the [Apple security release](https://support.apple.com/en-us/HT201222) and apply the necessary updates:
For more information, kindly refer the link below: <https://support.apple.com/en-ae/100100>
Generally, we advise users to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact the Cyber999 Incident Response Centre through the following channels:
E-mail: cyber999[at]cybersecurity.my 
Phone: 1-300-88-2999 (monitored during business hours) 
Mobile: +60 19 2665850 (24x7 call incident reporting) 
Business Hours: Mon - Fri 08:30 -17:30 MYT 
Web: [https://www.mycert.org.my](https://www.mycert.org.my/) 
**5.0 References**
- <https://support.apple.com/en-ae/100100>