TRIADA
Back to live map

CVE-2025-24201

KEVApple Multiple Products WebKit Out-of-Bounds Write Vulnerability
Description

Apple iOS, iPadOS, macOS, and other Apple products contain an out-of-bounds write vulnerability in WebKit that may allow maliciously crafted web content to break out of Web Content sandbox. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

Publishedn/a
Last modifiedn/a
Added to KEVMar 13, 2025
Remediation dueApr 3, 2025
0 recent articles mention this CVE
    30
    Risk assessment · Low

    Actively exploited. Patch immediately.

    Exploitation
    Confirmed in the wild (CISA KEV)
    Federal remediation deadline
    Overdue by 572 days
    CVSS
    Not yet scored by NVD
    Recommended actions
    1. 1.Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    2. 2.Treat as emergency change: patch or isolate internet-facing instances first.
    3. 3.Hunt for compromise: review logs for the disclosure window, not just from the patch date.

    Assessment is derived automatically from the live signals above; verify against your own asset inventory.