CRITICAL

CVE-2025-24201

Apple Safari 2025-03-11 CVSS v3.1
CVSS
10
KEV

Description

An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.2 and iPadOS 18.3.2, iPadOS 17.7.6, macOS Sequoia 15.3.2, visionOS 2.3.2, watchOS 11.4. Maliciously crafted web content may be able to break out of Web Content sandbox. This is a supplementary fix for an attack that was blocked in iOS 17.2. (Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.).

Summary dbcve.org

An out-of-bounds write vulnerability in WebKit allows malicious web content to escape the Web Content sandbox, potentially enabling arbitrary code execution. Apple reports this is a supplementary fix for an attack previously blocked in iOS 17.2, with confirmed in-the-wild exploitation against targeted individuals on older iOS versions.

Mitigation

Apply the vendor-supplied updates immediately: Safari 18.3.1, iOS/iPadOS 15.8.4+, 16.7.11+, 17.7.6+, 18.3.2+, macOS Sequoia 15.3.2+, visionOS 2.3.2+, and watchOS 11.4+. Prioritize iOS devices given confirmed active exploitation.

Weakness (CWE)

CWE-787 Out-of-bounds Write

EPSS Score

3.77%
Probability of exploitation in next 30 days
89.5th percentile

References

https://support.apple.com/en-us/122281 Release Notes, Vendor Advisory https://support.apple.com/en-us/122283 Release Notes, Vendor Advisory https://support.apple.com/en-us/122284 Release Notes, Vendor Advisory https://support.apple.com/en-us/122285 Release Notes, Vendor Advisory https://support.apple.com/en-us/122345 Release Notes, Vendor Advisory https://support.apple.com/en-us/122346 Release Notes, Vendor Advisory https://support.apple.com/en-us/122372 Release Notes, Vendor Advisory https://support.apple.com/en-us/122376 Release Notes, Vendor Advisory http://seclists.org/fulldisclosure/2025/Apr/16 Mailing List, Third Party Advisory http://seclists.org/fulldisclosure/2025/Apr/7 Mailing List, Third Party Advisory http://seclists.org/fulldisclosure/2025/Jun/19 Mailing List, Third Party Advisory http://seclists.org/fulldisclosure/2025/Mar/2 Mailing List, Third Party Advisory http://seclists.org/fulldisclosure/2025/Mar/3 Mailing List, Third Party Advisory http://seclists.org/fulldisclosure/2025/Mar/4 Mailing List, Third Party Advisory http://seclists.org/fulldisclosure/2025/Mar/5 Mailing List, Third Party Advisory http://seclists.org/fulldisclosure/2025/Oct/1 Mailing List, Third Party Advisory http://seclists.org/fulldisclosure/2025/Oct/31 Mailing List, Third Party Advisory https://github.com/JGoyd/Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201 Third Party Advisory https://github.com/cisagov/vulnrichment/issues/194 Issue Tracking https://lists.debian.org/debian-lts-announce/2025/06/msg00016.html Mailing List https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24201 US Government Resource
View on dbcve.org
Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.
Back to CVE