Firetruck

CVE-2025-24201

KEV
Updated Apr 2, 2026 · PUBLISHED
View KEV entry →

Description

Apple iOS, iPadOS, macOS, and other Apple products contain an out-of-bounds write vulnerability in WebKit that may allow maliciously crafted web content to break out of Web Content sandbox. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
iOS and iPadOSApple / iOS and iPadOS>= 0, < 15.8.4affected
iOS and iPadOSApple / iOS and iPadOS>= 0, < 16.7.11affected
iOS and iPadOSApple / iOS and iPadOS>= 0, < 18.3.2affected
iPadOSApple / iPadOS>= 0, < 17.7.6affected
macOSApple / macOS>= 0, < 15.3.2affected
SafariApple / Safari>= 0, < 18.3.1affected
visionOSApple / visionOS>= 0, < 2.3.2affected
watchOSApple / watchOS>= 0, < 11.4affected