Apple is advising iPhone, iPad and Watch customers to upgrade the software that runs their devices as soon as possible.
New updates patch a "cross site scripting" vulnerability that could let hackers insert malicious code onto affected devices, granting them access to users' private data.
Apple says on its security update page that it is " aware of a report that this issue may have been actively exploited."
For newer iPhone and iPad users, iOS 14.4.2 is now live and available for download. For older devices like the iPhone 6, iPhone 5s and several discontinued models of iPad, iOS 12.5.2 closes this vulnerability. Apple Watch users will need WatchOS 7.3.3.