Zero-Day News Bulletin - August 25, 2025

Date: Monday, August 25, 2025 Location: Global Cybersecurity Community

Summary: No new zero-day vulnerabilities were publicly disclosed or exploited on August 25, 2025. Over the past week, the cybersecurity industry has focused on recent patches for high-profile zero-day flaws disclosed earlier in the month.

Recent Zero-Day Patch Updates

• On August 21, Apple released emergency updates addressing CVE-2025-43300, an out-of-bounds write zero-day in the ImageIO framework exploited in targeted attacks against specific individuals. iOS 18.6.2, iPadOS 18.6.2, and macOS Ventura, Sonoma, and Sequoia received fixes to improve bounds checking and prevent memory corruption.
• On August 12, Microsoft’s Patch Tuesday addressed one publicly disclosed zero-day (CVE-2025-53779) in Windows Kerberos. The flaw, involving relative path traversal in delegated Managed Service Account (dMSA) objects, could allow an authenticated attacker to elevate privileges to domain administrator.

Industry Monitoring

Major vulnerability vendors and researchers continue to track the active exploitation landscape. No fresh zero-day advisories have been added to the Zero Day Initiative catalog as of today. Security teams are advised to maintain up-to-date patch levels and monitor vendor advisories for any emerging risks.

Outlook

With no new zero-day disclosures on August 25, 2025, organizations can focus on deploying the latest patches and strengthening intrusion detection around known critical vulnerabilities. Continuous vigilance remains essential as threat actors may exploit unreported flaws.