Vulnerability-Lookup

CVE-2025-31277 (GCVE-0-2025-31277)

Vulnerability from cvelistv5 – Published: 2025-07-29 23:29 – Updated: 2026-07-15 01:26

CISA KEVIntel

Summary

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

Exploitation: active Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

Processing maliciously crafted web content may lead to memory corruption
CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Assigner

apple

References

25 references

URL	Tags
https://support.apple.com/en-us/124147
https://support.apple.com/en-us/124149
https://support.apple.com/en-us/124152
https://support.apple.com/en-us/124153
https://support.apple.com/en-us/124154
https://support.apple.com/en-us/124155
https://cloud.google.com/blog/topics/threat-intel…	third-party-advisory
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource
http://seclists.org/fulldisclosure/2025/Aug/0
http://seclists.org/fulldisclosure/2025/Jul/36
http://seclists.org/fulldisclosure/2025/Jul/32
http://seclists.org/fulldisclosure/2025/Jul/30
https://access.redhat.com/security/cve/CVE-2025-31277	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2448780	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2025:19352	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:17802	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:19157	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:19165	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:19109	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:17807	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:17643	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:17743	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:17741	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:18097	vendor-advisoryx_refsource_REDHAT

Impacted products

22 products

Vendor	Product	Version
Apple	Safari	Affected: 0 , < 18.6 (custom)
Apple	iOS and iPadOS	Affected: 0 , < 18.6 (custom)
Apple	macOS	Affected: 0 , < 15.6 (custom)
Apple	tvOS	Affected: 0 , < 18.6 (custom)
Apple	visionOS	Affected: 0 , < 2.6 (custom)
Apple	watchOS	Affected: 0 , < 11.6 (custom)
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	Unaffected: 0:2.50.0-1.el7_9 , < * (rpm) cpe:/o:redhat:rhel_els:7
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:2.50.0-1.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8.2 Advanced Update Support	Unaffected: 0:2.50.0-1.el8_2 , < * (rpm) cpe:/a:redhat:rhel_aus:8.2
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	Unaffected: 0:2.50.0-1.el8_4 , < * (rpm) cpe:/a:redhat:rhel_aus:8.4
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	Unaffected: 0:2.50.0-1.el8_4 , < * (rpm) cpe:/a:redhat:rhel_eus_long_life:8.4
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	Unaffected: 0:2.50.0-1.el8_6 , < * (rpm) cpe:/a:redhat:rhel_aus:8.6
Red Hat	Red Hat Enterprise Linux 8.6 Telecommunications Update Service	Unaffected: 0:2.50.0-1.el8_6 , < * (rpm) cpe:/a:redhat:rhel_tus:8.6
Red Hat	Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	Unaffected: 0:2.50.0-1.el8_6 , < * (rpm) cpe:/a:redhat:rhel_e4s:8.6
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	Unaffected: 0:2.50.0-1.el8_8.1 , < * (rpm) cpe:/a:redhat:rhel_tus:8.8
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	Unaffected: 0:2.50.0-1.el8_8.1 , < * (rpm) cpe:/a:redhat:rhel_e4s:8.8
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:2.50.1-0.el9_6 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	Unaffected: 0:2.50.0-2.el9_0 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.0
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:2.50.0-2.el9_2 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	Unaffected: 0:2.50.0-2.el9_4 , < * (rpm) cpe:/a:redhat:rhel_eus:9.4
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7

CISA

Known Exploited Vulnerability - GCVE BCP-07 Compliant

KEV entry ID: 53903deb-ca5c-45b4-abfd-7aa40ea28763

Vulnerability ID: CVE-2025-31277

Status: Confirmed

Status Updated: 2026-03-20 00:00 UTC

Exploited: Yes

Timestamps

First Seen: 2026-03-20

Asserted: 2026-03-20

Scope

Notes: KEV entry: Apple Multiple Products Buffer Overflow Vulnerability | Affected: Apple / Multiple Products | Description: Apple Safari, iOS, watchOS, visionOS, iPadOS, macOS, and tvOS contain a buffer overflow vulnerability that could allow the processing of maliciously crafted web content which may lead to memory corruption. | Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. | Due date: 2026-04-03 | Known ransomware campaign use (KEV): Unknown | Notes (KEV): https://support.apple.com/en-us/124147 ; https://support.apple.com/en-us/124149 ; https://support.apple.com/en-us/124152 ; https://support.apple.com/en-us/124153 ; https://support.apple.com/en-us/124155 ; https://nvd.nist.gov/vuln/detail/CVE-2025-31277

Evidence

Type: Vendor Report

Signal: Successful Exploitation

Confidence: 80%

Source: cisa-kev

Details

Cwes	CWE-119
Feed	CISA Known Exploited Vulnerabilities Catalog
Product	Multiple Products
Due Date	2026-04-03
Date Added	2026-03-20
Vendorproject	Apple
Vulnerabilityname	Apple Multiple Products Buffer Overflow Vulnerability
Knownransomwarecampaignuse	Unknown

References

CVE-2025-31277

Created: 2026-03-20 16:00 UTC | Updated: 2026-03-20 16:00 UTC

KEVIntel

Known Exploited Vulnerability - GCVE BCP-07 Compliant

KEV entry ID: b25c662c-0db0-4b33-b890-bc2f49f8a9db

Vulnerability ID: CVE-2025-31277

Status: Confirmed

Status Updated: 2026-06-01 13:30 UTC

Exploited: Yes

Timestamps

First Seen: 2026-06-01

Asserted: 2026-06-01

Scope

Notes: KEVIntel entry: The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6,... | Affected: Apple / Safari, iOS and iPadOS, macOS, tvOS, visionOS, watchOS | CVSS: 8.8 (HIGH) | EPSS: 0.01428 | Used in malware: unknown | Not yet in CISA KEV: False

Evidence

Type: Public Report

Signal: Successful Exploitation

Confidence: 70%

Source: kevintel

Details

Feed	KEVIntel (kevintel.com)
Title	The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6,...
Vendor	Apple
Product	Safari, iOS and iPadOS, macOS, tvOS, visionOS, watchOS
Added Date	2026-06-01T13:30:35.304Z
Cvss Score	8.8
Epss Score	0.01428
Cvss Severity	HIGH
Epss Percentile	0.69516
Used In Malware	unknown
Ahead Of Cisa Kev	None
Not Yet In Cisa Kev	False

References

Created: 2026-06-19 12:42 UTC | Updated: 2026-06-19 12:42 UTC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-31277",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-31T03:56:01.249253Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-31277",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-21T04:00:59.438579Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2026-03-20",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-31277"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-23T13:14:07.203Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "third-party-advisory"
            ],
            "url": "https://cloud.google.com/blog/topics/threat-intelligence/darksword-ios-exploit-chain/"
          },
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-31277"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T19:52:50.809Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/Aug/0"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Jul/36"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Jul/32"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/Jul/30"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_els:7"
            ],
            "defaultStatus": "affected",
            "packageName": "webkitgtk4",
            "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.50.0-1.el7_9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "webkit2gtk3",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.50.0-1.el8_10",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_aus:8.2"
            ],
            "defaultStatus": "affected",
            "packageName": "webkit2gtk3",
            "product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.50.0-1.el8_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_aus:8.4"
            ],
            "defaultStatus": "affected",
            "packageName": "webkit2gtk3",
            "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.50.0-1.el8_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus_long_life:8.4"
            ],
            "defaultStatus": "affected",
            "packageName": "webkit2gtk3",
            "product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.50.0-1.el8_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_aus:8.6"
            ],
            "defaultStatus": "affected",
            "packageName": "webkit2gtk3",
            "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.50.0-1.el8_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_tus:8.6"
            ],
            "defaultStatus": "affected",
            "packageName": "webkit2gtk3",
            "product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.50.0-1.el8_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:8.6"
            ],
            "defaultStatus": "affected",
            "packageName": "webkit2gtk3",
            "product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.50.0-1.el8_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_tus:8.8"
            ],
            "defaultStatus": "affected",
            "packageName": "webkit2gtk3",
            "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.50.0-1.el8_8.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:8.8"
            ],
            "defaultStatus": "affected",
            "packageName": "webkit2gtk3",
            "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.50.0-1.el8_8.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "webkit2gtk3",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.50.1-0.el9_6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.0"
            ],
            "defaultStatus": "affected",
            "packageName": "webkit2gtk3",
            "product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.50.0-2.el9_0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2"
            ],
            "defaultStatus": "affected",
            "packageName": "webkit2gtk3",
            "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.50.0-2.el9_2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "webkit2gtk3",
            "product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.50.0-2.el9_4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:6"
            ],
            "defaultStatus": "unknown",
            "packageName": "webkitgtk",
            "product": "Red Hat Enterprise Linux 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "webkitgtk3",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-03-18T00:00:00.000Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-120",
                "description": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-15T01:26:42.323Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2025-31277"
          },
          {
            "name": "RHBZ#2448780",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448780"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-31277.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2025:19352"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2025:17802"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2025:19157"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2025:19165"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2025:19109"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2025:17807"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2025:17643"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2025:17743"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2025:17741"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2025:18097"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2025:19352: Red Hat Enterprise Linux Server (v. 7 ELS), Red Hat Enterprise Linux Server Optional (v. 7 ELS)"
          },
          {
            "lang": "en",
            "value": "RHSA-2025:17802: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2025:19157: Red Hat Enterprise Linux AppStream AUS (v. 8.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2025:19165: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2025:19109: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2025:17807: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2025:17643: Red Hat Enterprise Linux AppStream E4S (v.9.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2025:17743: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2025:17741: Red Hat Enterprise Linux AppStream EUS (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2025:18097: Red Hat Enterprise Linux AppStream (v. 9)"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-03-18T20:06:11.785Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-03-18T00:00:00.000Z",
            "value": "Made public."
          }
        ],
        "title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
        "workarounds": [
          {
            "lang": "en",
            "value": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "11.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to memory corruption",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-02T18:27:12.615Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/124147"
        },
        {
          "url": "https://support.apple.com/en-us/124149"
        },
        {
          "url": "https://support.apple.com/en-us/124152"
        },
        {
          "url": "https://support.apple.com/en-us/124153"
        },
        {
          "url": "https://support.apple.com/en-us/124154"
        },
        {
          "url": "https://support.apple.com/en-us/124155"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-31277",
    "datePublished": "2025-07-29T23:29:31.341Z",
    "dateReserved": "2025-03-27T16:13:58.344Z",
    "dateUpdated": "2026-07-15T01:26:42.323Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "cisa_known_exploited": {
      "cveID": "CVE-2025-31277",
      "cwes": "[\"CWE-119\"]",
      "dateAdded": "2026-03-20",
      "dueDate": "2026-04-03",
      "knownRansomwareCampaignUse": "Unknown",
      "notes": "https://support.apple.com/en-us/124147 ; https://support.apple.com/en-us/124149 ; https://support.apple.com/en-us/124152 ; https://support.apple.com/en-us/124153 ; https://support.apple.com/en-us/124155 ; https://nvd.nist.gov/vuln/detail/CVE-2025-31277",
      "product": "Multiple Products",
      "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "shortDescription": "Apple Safari, iOS, watchOS, visionOS, iPadOS, macOS, and tvOS contain a buffer overflow vulnerability that could allow the processing of maliciously crafted web content which may lead to memory corruption.",
      "vendorProject": "Apple",
      "vulnerabilityName": "Apple Multiple Products Buffer Overflow Vulnerability"
    },
    "epss": {
      "cve": "CVE-2025-31277",
      "date": "2026-07-21",
      "epss": "0.01481",
      "percentile": "0.71101"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-31277\",\"sourceIdentifier\":\"product-security@apple.com\",\"published\":\"2025-07-30T00:15:30.830\",\"lastModified\":\"2026-07-15T02:17:23.693\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.\"},{\"lang\":\"es\",\"value\":\"El problema se solucion\u00f3 mejorando la gesti\u00f3n de la memoria. Este problema est\u00e1 corregido en watchOS 11.6, visionOS 2.6, iOS 18.6 y iPadOS 18.6, macOS Sequoia 15.6 y tvOS 18.6. El procesamiento de contenido web manipulado con fines malintencionados puede provocar da\u00f1os en la memoria.\"}],\"affected\":[{\"source\":\"product-security@apple.com\",\"affectedData\":[{\"vendor\":\"Apple\",\"product\":\"Safari\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"18.6\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Apple\",\"product\":\"iOS and iPadOS\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"18.6\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Apple\",\"product\":\"macOS\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"15.6\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Apple\",\"product\":\"tvOS\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"18.6\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Apple\",\"product\":\"visionOS\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"2.6\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Apple\",\"product\":\"watchOS\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"11.6\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7 Extended Lifecycle Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"webkitgtk4\",\"cpes\":[\"cpe:/o:redhat:rhel_els:7\"],\"versions\":[{\"version\":\"0:2.50.0-1.el7_9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"webkit2gtk3\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"0:2.50.0-1.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.2 Advanced Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"webkit2gtk3\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.2\"],\"versions\":[{\"version\":\"0:2.50.0-1.el8_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"webkit2gtk3\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.4\"],\"versions\":[{\"version\":\"0:2.50.0-1.el8_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"webkit2gtk3\",\"cpes\":[\"cpe:/a:redhat:rhel_eus_long_life:8.4\"],\"versions\":[{\"version\":\"0:2.50.0-1.el8_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"webkit2gtk3\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.6\"],\"versions\":[{\"version\":\"0:2.50.0-1.el8_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"webkit2gtk3\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.6\"],\"versions\":[{\"version\":\"0:2.50.0-1.el8_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"webkit2gtk3\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.6\"],\"versions\":[{\"version\":\"0:2.50.0-1.el8_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"webkit2gtk3\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.8\"],\"versions\":[{\"version\":\"0:2.50.0-1.el8_8.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"webkit2gtk3\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.8\"],\"versions\":[{\"version\":\"0:2.50.0-1.el8_8.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"webkit2gtk3\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:2.50.1-0.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"webkit2gtk3\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.0\"],\"versions\":[{\"version\":\"0:2.50.0-2.el9_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"webkit2gtk3\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2\"],\"versions\":[{\"version\":\"0:2.50.0-2.el9_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"webkit2gtk3\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.4\"],\"versions\":[{\"version\":\"0:2.50.0-2.el9_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 6\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"webkitgtk\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"webkitgtk3\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2025-07-31T03:56:01.249253Z\",\"id\":\"CVE-2025-31277\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-03-21T04:00:59.438579Z\",\"id\":\"CVE-2025-31277\",\"options\":[{\"exploitation\":\"active\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2025-07-31T03:56:01.249253Z\",\"id\":\"CVE-2025-31277\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-03-21T04:00:59.438579Z\",\"id\":\"CVE-2025-31277\",\"options\":[{\"exploitation\":\"active\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2025-07-31T03:56:01.249253Z\",\"id\":\"CVE-2025-31277\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-03-21T04:00:59.438579Z\",\"id\":\"CVE-2025-31277\",\"options\":[{\"exploitation\":\"active\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2025-07-31T03:56:01.249253Z\",\"id\":\"CVE-2025-31277\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-03-21T04:00:59.438579Z\",\"id\":\"CVE-2025-31277\",\"options\":[{\"exploitation\":\"active\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"cisaExploitAdd\":\"2026-03-20\",\"cisaActionDue\":\"2026-04-03\",\"cisaRequiredAction\":\"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.\",\"cisaVulnerabilityName\":\"Apple Multiple Products Buffer Overflow Vulnerability\",\"weaknesses\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-119\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-120\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"18.6\",\"matchCriteriaId\":\"969AD7A8-5CCF-4607-BBE8-E06E642A170C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"18.6\",\"matchCriteriaId\":\"8ED4015E-C707-4A91-86B3-23100E0DFA8F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"18.6\",\"matchCriteriaId\":\"BD9D42A7-DE2A-4D5A-8C7B-002A60148483\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"15.0\",\"versionEndExcluding\":\"15.6\",\"matchCriteriaId\":\"4CF17CE2-DB4B-48D1-81AF-67EF1EC7BB45\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"18.6\",\"matchCriteriaId\":\"FBC1698A-3E9C-4055-B23A-13A3C22BD6EE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.6\",\"matchCriteriaId\":\"EADBC0BD-ECAC-4E0A-B490-24649AFE5355\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"11.6\",\"matchCriteriaId\":\"35D9C2D7-6120-4631-8D0B-259641DFD85B\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.50.0\",\"matchCriteriaId\":\"7B3BDA14-887C-4B6D-8F45-43DD5DF09691\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wpewebkit:wpe_webkit:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.50.0\",\"matchCriteriaId\":\"93EC7F89-B5AE-400E-A4DA-3C14DF5E493F\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"142AD0DD-4CF3-4D74-9442-459CE3347E3A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4CFF558-3C47-480D-A2F0-BABF26042943\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F6FB57C-2BC7-487C-96DD-132683AEB35D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_aus:8.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7883DE07-470D-4160-9767-4F831B75B9A8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_aus:8.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4D5F4FA7-E5C5-4C23-BDA8-36A36972E4F4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_aus:8.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5CA4F12A-5BC5-4D75-8F20-80D8BB2C5BF2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_els:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0460F769-D90A-4446-AC00-24F66BDBF526\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0E3F09B5-569F-4C58-9FCA-3C0953D107B5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6C3741B8-851F-475D-B428-523F4F722350\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_eus:9.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B03506D7-0FCD-47B7-90F6-DDEEB5C5A733\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_tus:8.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C237415F-33FE-4686-9B19-A0916BF75D2D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_tus:8.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"22D28543-C7C5-46B0-B909-20435AF7A501\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FB096D5D-E8F6-4164-8B76-0217B7151D30\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"01ED4F33-EBE7-4C04-8312-3DA580EFFB68\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"083AAC55-E87B-482A-A1F4-8F2DEB90CB23\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1FD9BF0E-7ACF-4A83-B754-6E3979ED903F\"}]}]}],\"references\":[{\"url\":\"https://support.apple.com/en-us/124147\",\"source\":\"product-security@apple.com\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/124149\",\"source\":\"product-security@apple.com\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/124152\",\"source\":\"product-security@apple.com\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/124153\",\"source\":\"product-security@apple.com\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/124154\",\"source\":\"product-security@apple.com\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/124155\",\"source\":\"product-security@apple.com\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"http://seclists.org/fulldisclosure/2025/Aug/0\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://seclists.org/fulldisclosure/2025/Jul/30\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://seclists.org/fulldisclosure/2025/Jul/32\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://seclists.org/fulldisclosure/2025/Jul/36\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:17643\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:17741\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:17743\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:17802\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:17807\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:18097\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:19109\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:19157\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:19165\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:19352\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/security/cve/CVE-2025-31277\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2448780\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://cloud.google.com/blog/topics/threat-intelligence/darksword-ios-exploit-chain/\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"tags\":[\"Technical Description\"]},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-31277.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-31277\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"tags\":[\"US Government Resource\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Important",
      "current_release_date": "2026-06-28T11:38:01+00:00",
      "cve": "CVE-2025-31277",
      "id": "CVE-2025-31277",
      "initial_release_date": "2025-01-01T00:00:00+00:00",
      "product_status:fixed": "436",
      "product_status:known_affected": "4",
      "product_status:known_not_affected": "5",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-31277.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"http://seclists.org/fulldisclosure/2025/Aug/0\"}, {\"url\": \"http://seclists.org/fulldisclosure/2025/Jul/36\"}, {\"url\": \"http://seclists.org/fulldisclosure/2025/Jul/32\"}, {\"url\": \"http://seclists.org/fulldisclosure/2025/Jul/30\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-03T19:52:50.809Z\"}}, {\"title\": \"webkitgtk: Processing maliciously crafted web content may lead to memory corruption\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 8.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"cpes\": [\"cpe:/o:redhat:rhel_els:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux Server (v. 7 ELS)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_els:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux Server Optional (v. 7 ELS)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream (v. 8)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.2::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream AUS (v. 8.2)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream AUS (v.8.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream AUS (v.8.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream E4S (v.8.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_tus:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream TUS (v.8.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream E4S (v.8.8)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_tus:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream TUS (v.8.8)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.0::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream E4S (v.9.0)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream E4S (v.9.2)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream EUS (v.9.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream (v. 9)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 6\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"defaultStatus\": \"unaffected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-03-18T20:06:11.785Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-03-18T00:00:00.000Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2025:19352: Red Hat Enterprise Linux Server (v. 7 ELS), Red Hat Enterprise Linux Server Optional (v. 7 ELS)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2025:17802: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2025:19157: Red Hat Enterprise Linux AppStream AUS (v. 8.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2025:19165: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2025:19109: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2025:17807: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2025:17643: Red Hat Enterprise Linux AppStream E4S (v.9.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2025:17743: Red Hat Enterprise Linux AppStream E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2025:17741: Red Hat Enterprise Linux AppStream EUS (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2025:18097: Red Hat Enterprise Linux AppStream (v. 9)\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-03-18T00:00:00.000Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2025-31277\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2448780\", \"name\": \"RHBZ#2448780\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-31277.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:19352\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:17802\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:19157\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:19165\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:19109\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:17807\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:17643\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:17743\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:17741\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:18097\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Do not process or load untrusted web content with WebKitGTK.\\n\\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\\n\\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\\n\\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\\n\\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.\"}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-120\", \"description\": \"Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-06-30T03:16:57.786Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 8.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-31277\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-03-21T04:00:59.438579Z\"}}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-31277\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-03-21T04:00:59.438579Z\"}}}, {\"other\": {\"type\": \"kev\", \"content\": {\"dateAdded\": \"2026-03-20\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-31277\"}}}], \"references\": [{\"url\": \"https://cloud.google.com/blog/topics/threat-intelligence/darksword-ios-exploit-chain/\", \"tags\": [\"third-party-advisory\"]}, {\"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-31277\", \"tags\": [\"government-resource\"]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-119\", \"description\": \"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-07-30T13:27:56.030Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"Apple\", \"product\": \"Safari\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"18.6\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"iOS and iPadOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"18.6\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"macOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"15.6\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"tvOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"18.6\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"visionOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"2.6\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"watchOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"11.6\", \"versionType\": \"custom\"}]}], \"references\": [{\"url\": \"https://support.apple.com/en-us/124147\"}, {\"url\": \"https://support.apple.com/en-us/124149\"}, {\"url\": \"https://support.apple.com/en-us/124152\"}, {\"url\": \"https://support.apple.com/en-us/124153\"}, {\"url\": \"https://support.apple.com/en-us/124154\"}, {\"url\": \"https://support.apple.com/en-us/124155\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"Processing maliciously crafted web content may lead to memory corruption\"}]}], \"providerMetadata\": {\"orgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"shortName\": \"apple\", \"dateUpdated\": \"2026-04-02T18:27:12.615Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2025-31277\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-06-30T03:16:57.786Z\", \"dateReserved\": \"2025-03-27T16:13:58.344Z\", \"assignerOrgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"datePublished\": \"2025-07-29T23:29:31.341Z\", \"assignerShortName\": \"apple\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

WID-SEC-W-2025-1668

Vulnerability from csaf_certbund - Published: 2025-07-29 22:00 - Updated: 2026-04-06 22:00

Summary

Apple iOS und iPadOS: Mehrere Schwachstellen

Severity

Hoch

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Das Apple iOS (vormals iPhone OS) ist das Betriebssystem für das von Apple entwickelte Smartphone iPhone, iPad und iPod Touch. Das Apple iPadOS ist das Betriebssystem für das von Apple entwickelte iPad.

Angriff: Ein Angreifer kann mehrere Schwachstellen in Apple iOS und Apple iPadOS ausnutzen, um Informationen offenzulegen, um einen Denial of Service Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen und um weitere, nicht spezifizierte Auswirkungen zu verursachen.

Betroffene Betriebssysteme: - iPhoneOS - Sonstiges

CVE-2025-24220

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iPadOS <18.6 Apple / iPadOS		<18.6
Apple iOS <18.6 Apple / iOS		<18.6
Apple iPadOS <17.7.9 Apple / iPadOS		<17.7.9

CVE-2025-24224

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iPadOS <18.6 Apple / iPadOS		<18.6
Apple iOS <18.6 Apple / iOS		<18.6
Apple iPadOS <17.7.9 Apple / iPadOS		<17.7.9

CVE-2025-31229

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iPadOS <18.6 Apple / iPadOS		<18.6
Apple iOS <18.6 Apple / iOS		<18.6
Apple iPadOS <17.7.9 Apple / iPadOS		<17.7.9

CVE-2025-31273

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iPadOS <18.6 Apple / iPadOS		<18.6
Apple iOS <18.6 Apple / iOS		<18.6
Apple iPadOS <17.7.9 Apple / iPadOS		<17.7.9

CVE-2025-31276

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iPadOS <18.6 Apple / iPadOS		<18.6
Apple iOS <18.6 Apple / iOS		<18.6
Apple iPadOS <17.7.9 Apple / iPadOS		<17.7.9

CVE-2025-31277

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iPadOS <18.6 Apple / iPadOS		<18.6
Apple iOS <18.6 Apple / iOS		<18.6
Apple iPadOS <17.7.9 Apple / iPadOS		<17.7.9

CVE-2025-31278

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iPadOS <18.6 Apple / iPadOS		<18.6
Apple iOS <18.6 Apple / iOS		<18.6
Apple iPadOS <17.7.9 Apple / iPadOS		<17.7.9

CVE-2025-31279

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iPadOS <18.6 Apple / iPadOS		<18.6
Apple iOS <18.6 Apple / iOS		<18.6
Apple iPadOS <17.7.9 Apple / iPadOS		<17.7.9

CVE-2025-31281

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iPadOS <18.6 Apple / iPadOS		<18.6
Apple iOS <18.6 Apple / iOS		<18.6
Apple iPadOS <17.7.9 Apple / iPadOS		<17.7.9

CVE-2025-43186

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iPadOS <18.6 Apple / iPadOS		<18.6
Apple iOS <18.6 Apple / iOS		<18.6
Apple iPadOS <17.7.9 Apple / iPadOS		<17.7.9

CVE-2025-43202

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iPadOS <18.6 Apple / iPadOS		<18.6
Apple iOS <18.6 Apple / iOS		<18.6
Apple iPadOS <17.7.9 Apple / iPadOS		<17.7.9

CVE-2025-43209

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iPadOS <18.6 Apple / iPadOS		<18.6
Apple iOS <18.6 Apple / iOS		<18.6
Apple iPadOS <17.7.9 Apple / iPadOS		<17.7.9

CVE-2025-43210

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iPadOS <18.6 Apple / iPadOS		<18.6
Apple iOS <18.6 Apple / iOS		<18.6
Apple iPadOS <17.7.9 Apple / iPadOS		<17.7.9

CVE-2025-43211

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iPadOS <18.6 Apple / iPadOS		<18.6
Apple iOS <18.6 Apple / iOS		<18.6
Apple iPadOS <17.7.9 Apple / iPadOS		<17.7.9

CVE-2025-43212

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iPadOS <18.6 Apple / iPadOS		<18.6
Apple iOS <18.6 Apple / iOS		<18.6
Apple iPadOS <17.7.9 Apple / iPadOS		<17.7.9

CVE-2025-43213

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iPadOS <18.6 Apple / iPadOS		<18.6
Apple iOS <18.6 Apple / iOS		<18.6
Apple iPadOS <17.7.9 Apple / iPadOS		<17.7.9

CVE-2025-43214

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iPadOS <18.6 Apple / iPadOS		<18.6
Apple iOS <18.6 Apple / iOS		<18.6
Apple iPadOS <17.7.9 Apple / iPadOS		<17.7.9

CVE-2025-43216

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iPadOS <18.6 Apple / iPadOS		<18.6
Apple iOS <18.6 Apple / iOS		<18.6
Apple iPadOS <17.7.9 Apple / iPadOS		<17.7.9

CVE-2025-43217

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iPadOS <18.6 Apple / iPadOS		<18.6
Apple iOS <18.6 Apple / iOS		<18.6
Apple iPadOS <17.7.9 Apple / iPadOS		<17.7.9

CVE-2025-43220

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iPadOS <18.6 Apple / iPadOS		<18.6
Apple iOS <18.6 Apple / iOS		<18.6
Apple iPadOS <17.7.9 Apple / iPadOS		<17.7.9

CVE-2025-43221

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iPadOS <18.6 Apple / iPadOS		<18.6
Apple iOS <18.6 Apple / iOS		<18.6
Apple iPadOS <17.7.9 Apple / iPadOS		<17.7.9

CVE-2025-43222

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iPadOS <18.6 Apple / iPadOS		<18.6
Apple iOS <18.6 Apple / iOS		<18.6
Apple iPadOS <17.7.9 Apple / iPadOS		<17.7.9

CVE-2025-43223

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iPadOS <18.6 Apple / iPadOS		<18.6
Apple iOS <18.6 Apple / iOS		<18.6
Apple iPadOS <17.7.9 Apple / iPadOS		<17.7.9

CVE-2025-43224

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iPadOS <18.6 Apple / iPadOS		<18.6
Apple iOS <18.6 Apple / iOS		<18.6
Apple iPadOS <17.7.9 Apple / iPadOS		<17.7.9

CVE-2025-43225

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iPadOS <18.6 Apple / iPadOS		<18.6
Apple iOS <18.6 Apple / iOS		<18.6
Apple iPadOS <17.7.9 Apple / iPadOS		<17.7.9

CVE-2025-43226

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iPadOS <18.6 Apple / iPadOS		<18.6
Apple iOS <18.6 Apple / iOS		<18.6
Apple iPadOS <17.7.9 Apple / iPadOS		<17.7.9

CVE-2025-43227

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iPadOS <18.6 Apple / iPadOS		<18.6
Apple iOS <18.6 Apple / iOS		<18.6
Apple iPadOS <17.7.9 Apple / iPadOS		<17.7.9

CVE-2025-43228

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iPadOS <18.6 Apple / iPadOS		<18.6
Apple iOS <18.6 Apple / iOS		<18.6
Apple iPadOS <17.7.9 Apple / iPadOS		<17.7.9

CVE-2025-43230

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iPadOS <18.6 Apple / iPadOS		<18.6
Apple iOS <18.6 Apple / iOS		<18.6
Apple iPadOS <17.7.9 Apple / iPadOS		<17.7.9

CVE-2025-43234

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iPadOS <18.6 Apple / iPadOS		<18.6
Apple iOS <18.6 Apple / iOS		<18.6
Apple iPadOS <17.7.9 Apple / iPadOS		<17.7.9

CVE-2025-43265

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iPadOS <18.6 Apple / iPadOS		<18.6
Apple iOS <18.6 Apple / iOS		<18.6
Apple iPadOS <17.7.9 Apple / iPadOS		<17.7.9

CVE-2025-43277

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iPadOS <18.6 Apple / iPadOS		<18.6
Apple iOS <18.6 Apple / iOS		<18.6
Apple iPadOS <17.7.9 Apple / iPadOS		<17.7.9

CVE-2025-6558

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iPadOS <18.6 Apple / iPadOS		<18.6
Apple iOS <18.6 Apple / iOS		<18.6
Apple iPadOS <17.7.9 Apple / iPadOS		<17.7.9

CVE-2025-7424

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iPadOS <18.6 Apple / iPadOS		<18.6
Apple iOS <18.6 Apple / iOS		<18.6
Apple iPadOS <17.7.9 Apple / iPadOS		<17.7.9

CVE-2025-7425

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iPadOS <18.6 Apple / iPadOS		<18.6
Apple iOS <18.6 Apple / iOS		<18.6
Apple iPadOS <17.7.9 Apple / iPadOS		<17.7.9

References

5 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://support.apple.com/en-us/124147	external
https://support.apple.com/de-de/124148	external
https://www.cisa.gov/known-exploited-vulnerabilit…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Das Apple iOS (vormals iPhone OS) ist das Betriebssystem f\u00fcr das von Apple entwickelte Smartphone iPhone, iPad und iPod Touch.\r\nDas Apple iPadOS ist das Betriebssystem f\u00fcr das von Apple entwickelte iPad.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in Apple iOS und Apple iPadOS ausnutzen, um Informationen offenzulegen, um einen Denial of Service Angriff durchzuf\u00fchren, um Sicherheitsvorkehrungen zu umgehen und um weitere, nicht spezifizierte Auswirkungen zu verursachen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- iPhoneOS\n- Sonstiges",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2025-1668 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1668.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2025-1668 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1668"
      },
      {
        "category": "external",
        "summary": "Apple Security Announce vom 2025-07-29",
        "url": "https://support.apple.com/en-us/124147"
      },
      {
        "category": "external",
        "summary": "Apple Security Announce vom 2025-07-29",
        "url": "https://support.apple.com/de-de/124148"
      },
      {
        "category": "external",
        "summary": "CISA Known Exploited Vulnerabilities Catalog vom 2026-03-22",
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog."
      }
    ],
    "source_lang": "en-US",
    "title": "Apple iOS und iPadOS: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-04-06T22:00:00.000+00:00",
      "generator": {
        "date": "2026-04-07T10:16:09.135+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.5.0"
        }
      },
      "id": "WID-SEC-W-2025-1668",
      "initial_release_date": "2025-07-29T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2025-07-29T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2026-03-22T23:00:00.000+00:00",
          "number": "2",
          "summary": "Aktive Ausnutzung gemeldet"
        },
        {
          "date": "2026-04-06T22:00:00.000+00:00",
          "number": "3",
          "summary": "Referenz(en) aufgenommen: EUVD-2025-209193, EUVD-2025-209192"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c18.6",
                "product": {
                  "name": "Apple iOS \u003c18.6",
                  "product_id": "T045722"
                }
              },
              {
                "category": "product_version",
                "name": "18.6",
                "product": {
                  "name": "Apple iOS 18.6",
                  "product_id": "T045722-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:iphone_os:18.6"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "iOS"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c18.6",
                "product": {
                  "name": "Apple iPadOS \u003c18.6",
                  "product_id": "T045723"
                }
              },
              {
                "category": "product_version",
                "name": "18.6",
                "product": {
                  "name": "Apple iPadOS 18.6",
                  "product_id": "T045723-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:ipados:18.6"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c17.7.9",
                "product": {
                  "name": "Apple iPadOS \u003c17.7.9",
                  "product_id": "T045724"
                }
              },
              {
                "category": "product_version",
                "name": "17.7.9",
                "product": {
                  "name": "Apple iPadOS 17.7.9",
                  "product_id": "T045724-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:ipados:17.7.9"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "iPadOS"
          }
        ],
        "category": "vendor",
        "name": "Apple"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-24220",
      "product_status": {
        "known_affected": [
          "T045723",
          "T045722",
          "T045724"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-24220"
    },
    {
      "cve": "CVE-2025-24224",
      "product_status": {
        "known_affected": [
          "T045723",
          "T045722",
          "T045724"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-24224"
    },
    {
      "cve": "CVE-2025-31229",
      "product_status": {
        "known_affected": [
          "T045723",
          "T045722",
          "T045724"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-31229"
    },
    {
      "cve": "CVE-2025-31273",
      "product_status": {
        "known_affected": [
          "T045723",
          "T045722",
          "T045724"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-31273"
    },
    {
      "cve": "CVE-2025-31276",
      "product_status": {
        "known_affected": [
          "T045723",
          "T045722",
          "T045724"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-31276"
    },
    {
      "cve": "CVE-2025-31277",
      "product_status": {
        "known_affected": [
          "T045723",
          "T045722",
          "T045724"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-31277"
    },
    {
      "cve": "CVE-2025-31278",
      "product_status": {
        "known_affected": [
          "T045723",
          "T045722",
          "T045724"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-31278"
    },
    {
      "cve": "CVE-2025-31279",
      "product_status": {
        "known_affected": [
          "T045723",
          "T045722",
          "T045724"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-31279"
    },
    {
      "cve": "CVE-2025-31281",
      "product_status": {
        "known_affected": [
          "T045723",
          "T045722",
          "T045724"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-31281"
    },
    {
      "cve": "CVE-2025-43186",
      "product_status": {
        "known_affected": [
          "T045723",
          "T045722",
          "T045724"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43186"
    },
    {
      "cve": "CVE-2025-43202",
      "product_status": {
        "known_affected": [
          "T045723",
          "T045722",
          "T045724"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43202"
    },
    {
      "cve": "CVE-2025-43209",
      "product_status": {
        "known_affected": [
          "T045723",
          "T045722",
          "T045724"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43209"
    },
    {
      "cve": "CVE-2025-43210",
      "product_status": {
        "known_affected": [
          "T045723",
          "T045722",
          "T045724"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43210"
    },
    {
      "cve": "CVE-2025-43211",
      "product_status": {
        "known_affected": [
          "T045723",
          "T045722",
          "T045724"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43211"
    },
    {
      "cve": "CVE-2025-43212",
      "product_status": {
        "known_affected": [
          "T045723",
          "T045722",
          "T045724"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43212"
    },
    {
      "cve": "CVE-2025-43213",
      "product_status": {
        "known_affected": [
          "T045723",
          "T045722",
          "T045724"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43213"
    },
    {
      "cve": "CVE-2025-43214",
      "product_status": {
        "known_affected": [
          "T045723",
          "T045722",
          "T045724"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43214"
    },
    {
      "cve": "CVE-2025-43216",
      "product_status": {
        "known_affected": [
          "T045723",
          "T045722",
          "T045724"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43216"
    },
    {
      "cve": "CVE-2025-43217",
      "product_status": {
        "known_affected": [
          "T045723",
          "T045722",
          "T045724"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43217"
    },
    {
      "cve": "CVE-2025-43220",
      "product_status": {
        "known_affected": [
          "T045723",
          "T045722",
          "T045724"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43220"
    },
    {
      "cve": "CVE-2025-43221",
      "product_status": {
        "known_affected": [
          "T045723",
          "T045722",
          "T045724"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43221"
    },
    {
      "cve": "CVE-2025-43222",
      "product_status": {
        "known_affected": [
          "T045723",
          "T045722",
          "T045724"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43222"
    },
    {
      "cve": "CVE-2025-43223",
      "product_status": {
        "known_affected": [
          "T045723",
          "T045722",
          "T045724"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43223"
    },
    {
      "cve": "CVE-2025-43224",
      "product_status": {
        "known_affected": [
          "T045723",
          "T045722",
          "T045724"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43224"
    },
    {
      "cve": "CVE-2025-43225",
      "product_status": {
        "known_affected": [
          "T045723",
          "T045722",
          "T045724"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43225"
    },
    {
      "cve": "CVE-2025-43226",
      "product_status": {
        "known_affected": [
          "T045723",
          "T045722",
          "T045724"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43226"
    },
    {
      "cve": "CVE-2025-43227",
      "product_status": {
        "known_affected": [
          "T045723",
          "T045722",
          "T045724"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43227"
    },
    {
      "cve": "CVE-2025-43228",
      "product_status": {
        "known_affected": [
          "T045723",
          "T045722",
          "T045724"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43228"
    },
    {
      "cve": "CVE-2025-43230",
      "product_status": {
        "known_affected": [
          "T045723",
          "T045722",
          "T045724"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43230"
    },
    {
      "cve": "CVE-2025-43234",
      "product_status": {
        "known_affected": [
          "T045723",
          "T045722",
          "T045724"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43234"
    },
    {
      "cve": "CVE-2025-43265",
      "product_status": {
        "known_affected": [
          "T045723",
          "T045722",
          "T045724"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43265"
    },
    {
      "cve": "CVE-2025-43277",
      "product_status": {
        "known_affected": [
          "T045723",
          "T045722",
          "T045724"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43277"
    },
    {
      "cve": "CVE-2025-6558",
      "product_status": {
        "known_affected": [
          "T045723",
          "T045722",
          "T045724"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-6558"
    },
    {
      "cve": "CVE-2025-7424",
      "product_status": {
        "known_affected": [
          "T045723",
          "T045722",
          "T045724"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-7424"
    },
    {
      "cve": "CVE-2025-7425",
      "product_status": {
        "known_affected": [
          "T045723",
          "T045722",
          "T045724"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-7425"
    }
  ]
}

WID-SEC-W-2025-1672

Vulnerability from csaf_certbund - Published: 2025-07-29 22:00 - Updated: 2026-04-06 22:00

Summary

Apple macOS Sequoia, Sonoma und Ventura: Mehrere Schwachstellen

Severity

Hoch

Notes

Produktbeschreibung: Apple macOS ist ein Betriebssystem, das auf FreeBSD und Mach basiert.

Angriff: Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple macOS Sequoia, Sonoma und Ventura ausnutzen, um Root-Rechte zu erlangen, beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen preiszugeben, Daten zu verändern oder Sicherheitsmaßnahmen zu umgehen.

Betroffene Betriebssysteme: - MacOS X

CVE-2025-24119

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-24188

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-24224

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-31243

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-31273

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-31275

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-31277

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-31278

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-31279

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-31280

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-31281

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43184

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43185

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43186

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43187

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43188

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43189

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43191

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43192

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43193

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43194

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43195

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43196

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43197

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43198

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43199

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43202

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43206

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43209

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43210

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43211

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43212

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43213

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43214

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43215

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43216

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43218

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43219

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43220

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43221

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43222

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43223

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43224

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43225

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43226

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43227

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43229

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43230

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43232

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43233

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43234

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43235

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43236

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43237

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43238

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43239

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43240

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43241

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43243

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43244

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43245

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43246

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43247

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43248

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43249

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43250

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43251

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43252

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43253

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43254

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43255

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43256

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43257

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43259

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43260

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43261

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43264

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43265

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43266

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43267

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43268

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43270

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43273

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43274

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43275

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43276

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43277

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43282

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-43284

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-6558

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-7424

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

CVE-2025-7425

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Ventura <13.7.7 Apple / macOS		Ventura <13.7.7
Apple macOS Sequoia <15.6 Apple / macOS		Sequoia <15.6
Apple macOS Sonoma <14.7.7 Apple / macOS		Sonoma <14.7.7

References

6 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://support.apple.com/de-de/124149	external
https://support.apple.com/de-de/124150	external
https://support.apple.com/de-de/124151	external
https://www.cisa.gov/known-exploited-vulnerabilit…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Apple macOS ist ein Betriebssystem, das auf FreeBSD und Mach basiert.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple macOS Sequoia, Sonoma und Ventura ausnutzen, um Root-Rechte zu erlangen, beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen preiszugeben, Daten zu ver\u00e4ndern oder Sicherheitsma\u00dfnahmen zu umgehen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- MacOS X",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2025-1672 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1672.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2025-1672 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1672"
      },
      {
        "category": "external",
        "summary": "Apple Security Announce vom 2025-07-29",
        "url": "https://support.apple.com/de-de/124149"
      },
      {
        "category": "external",
        "summary": "Apple Security Announce vom 2025-07-29",
        "url": "https://support.apple.com/de-de/124150"
      },
      {
        "category": "external",
        "summary": "Apple Security Announce vom 2025-07-29",
        "url": "https://support.apple.com/de-de/124151"
      },
      {
        "category": "external",
        "summary": "CISA Known Exploited Vulnerabilities Catalog vom 2026-03-22",
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
      }
    ],
    "source_lang": "en-US",
    "title": "Apple macOS Sequoia, Sonoma und Ventura: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-04-06T22:00:00.000+00:00",
      "generator": {
        "date": "2026-04-07T10:16:09.953+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.5.0"
        }
      },
      "id": "WID-SEC-W-2025-1672",
      "initial_release_date": "2025-07-29T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2025-07-29T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2025-08-28T22:00:00.000+00:00",
          "number": "2",
          "summary": "CVE-2025-43284 erg\u00e4nzt"
        },
        {
          "date": "2025-08-31T22:00:00.000+00:00",
          "number": "3",
          "summary": "Referenz(en) aufgenommen: EUVD-2025-26254, EUVD-2025-26255, EUVD-2025-26196"
        },
        {
          "date": "2025-11-03T23:00:00.000+00:00",
          "number": "4",
          "summary": "CVE erg\u00e4nzt"
        },
        {
          "date": "2026-03-22T23:00:00.000+00:00",
          "number": "5",
          "summary": "Aktive Ausnutzung gemeldet"
        },
        {
          "date": "2026-04-06T22:00:00.000+00:00",
          "number": "6",
          "summary": "Referenz(en) aufgenommen: EUVD-2025-209195, EUVD-2025-209197, EUVD-2025-209193, EUVD-2025-209198, EUVD-2025-209192, EUVD-2025-209196, EUVD-2025-209194"
        }
      ],
      "status": "final",
      "version": "6"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "Sequoia \u003c15.6",
                "product": {
                  "name": "Apple macOS Sequoia \u003c15.6",
                  "product_id": "T045718"
                }
              },
              {
                "category": "product_version",
                "name": "Sequoia 15.6",
                "product": {
                  "name": "Apple macOS Sequoia 15.6",
                  "product_id": "T045718-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:mac_os:sequoia__15.6"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Sonoma \u003c14.7.7",
                "product": {
                  "name": "Apple macOS Sonoma \u003c14.7.7",
                  "product_id": "T045719"
                }
              },
              {
                "category": "product_version",
                "name": "Sonoma 14.7.7",
                "product": {
                  "name": "Apple macOS Sonoma 14.7.7",
                  "product_id": "T045719-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:mac_os:sonoma__14.7.7"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Ventura \u003c13.7.7",
                "product": {
                  "name": "Apple macOS Ventura \u003c13.7.7",
                  "product_id": "T045720"
                }
              },
              {
                "category": "product_version",
                "name": "Ventura 13.7.7",
                "product": {
                  "name": "Apple macOS Ventura 13.7.7",
                  "product_id": "T045720-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:mac_os:ventura__13.7.7"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "macOS"
          }
        ],
        "category": "vendor",
        "name": "Apple"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-24119",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-24119"
    },
    {
      "cve": "CVE-2025-24188",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-24188"
    },
    {
      "cve": "CVE-2025-24224",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-24224"
    },
    {
      "cve": "CVE-2025-31243",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-31243"
    },
    {
      "cve": "CVE-2025-31273",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-31273"
    },
    {
      "cve": "CVE-2025-31275",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-31275"
    },
    {
      "cve": "CVE-2025-31277",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-31277"
    },
    {
      "cve": "CVE-2025-31278",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-31278"
    },
    {
      "cve": "CVE-2025-31279",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-31279"
    },
    {
      "cve": "CVE-2025-31280",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-31280"
    },
    {
      "cve": "CVE-2025-31281",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-31281"
    },
    {
      "cve": "CVE-2025-43184",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43184"
    },
    {
      "cve": "CVE-2025-43185",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43185"
    },
    {
      "cve": "CVE-2025-43186",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43186"
    },
    {
      "cve": "CVE-2025-43187",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43187"
    },
    {
      "cve": "CVE-2025-43188",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43188"
    },
    {
      "cve": "CVE-2025-43189",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43189"
    },
    {
      "cve": "CVE-2025-43191",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43191"
    },
    {
      "cve": "CVE-2025-43192",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43192"
    },
    {
      "cve": "CVE-2025-43193",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43193"
    },
    {
      "cve": "CVE-2025-43194",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43194"
    },
    {
      "cve": "CVE-2025-43195",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43195"
    },
    {
      "cve": "CVE-2025-43196",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43196"
    },
    {
      "cve": "CVE-2025-43197",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43197"
    },
    {
      "cve": "CVE-2025-43198",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43198"
    },
    {
      "cve": "CVE-2025-43199",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43199"
    },
    {
      "cve": "CVE-2025-43202",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43202"
    },
    {
      "cve": "CVE-2025-43206",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43206"
    },
    {
      "cve": "CVE-2025-43209",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43209"
    },
    {
      "cve": "CVE-2025-43210",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43210"
    },
    {
      "cve": "CVE-2025-43211",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43211"
    },
    {
      "cve": "CVE-2025-43212",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43212"
    },
    {
      "cve": "CVE-2025-43213",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43213"
    },
    {
      "cve": "CVE-2025-43214",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43214"
    },
    {
      "cve": "CVE-2025-43215",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43215"
    },
    {
      "cve": "CVE-2025-43216",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43216"
    },
    {
      "cve": "CVE-2025-43218",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43218"
    },
    {
      "cve": "CVE-2025-43219",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43219"
    },
    {
      "cve": "CVE-2025-43220",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43220"
    },
    {
      "cve": "CVE-2025-43221",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43221"
    },
    {
      "cve": "CVE-2025-43222",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43222"
    },
    {
      "cve": "CVE-2025-43223",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43223"
    },
    {
      "cve": "CVE-2025-43224",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43224"
    },
    {
      "cve": "CVE-2025-43225",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43225"
    },
    {
      "cve": "CVE-2025-43226",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43226"
    },
    {
      "cve": "CVE-2025-43227",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43227"
    },
    {
      "cve": "CVE-2025-43229",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43229"
    },
    {
      "cve": "CVE-2025-43230",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43230"
    },
    {
      "cve": "CVE-2025-43232",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43232"
    },
    {
      "cve": "CVE-2025-43233",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43233"
    },
    {
      "cve": "CVE-2025-43234",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43234"
    },
    {
      "cve": "CVE-2025-43235",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43235"
    },
    {
      "cve": "CVE-2025-43236",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43236"
    },
    {
      "cve": "CVE-2025-43237",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43237"
    },
    {
      "cve": "CVE-2025-43238",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43238"
    },
    {
      "cve": "CVE-2025-43239",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43239"
    },
    {
      "cve": "CVE-2025-43240",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43240"
    },
    {
      "cve": "CVE-2025-43241",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43241"
    },
    {
      "cve": "CVE-2025-43243",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43243"
    },
    {
      "cve": "CVE-2025-43244",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43244"
    },
    {
      "cve": "CVE-2025-43245",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43245"
    },
    {
      "cve": "CVE-2025-43246",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43246"
    },
    {
      "cve": "CVE-2025-43247",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43247"
    },
    {
      "cve": "CVE-2025-43248",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43248"
    },
    {
      "cve": "CVE-2025-43249",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43249"
    },
    {
      "cve": "CVE-2025-43250",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43250"
    },
    {
      "cve": "CVE-2025-43251",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43251"
    },
    {
      "cve": "CVE-2025-43252",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43252"
    },
    {
      "cve": "CVE-2025-43253",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43253"
    },
    {
      "cve": "CVE-2025-43254",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43254"
    },
    {
      "cve": "CVE-2025-43255",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43255"
    },
    {
      "cve": "CVE-2025-43256",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43256"
    },
    {
      "cve": "CVE-2025-43257",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43257"
    },
    {
      "cve": "CVE-2025-43259",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43259"
    },
    {
      "cve": "CVE-2025-43260",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43260"
    },
    {
      "cve": "CVE-2025-43261",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43261"
    },
    {
      "cve": "CVE-2025-43264",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43264"
    },
    {
      "cve": "CVE-2025-43265",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43265"
    },
    {
      "cve": "CVE-2025-43266",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43266"
    },
    {
      "cve": "CVE-2025-43267",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43267"
    },
    {
      "cve": "CVE-2025-43268",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43268"
    },
    {
      "cve": "CVE-2025-43270",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43270"
    },
    {
      "cve": "CVE-2025-43273",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43273"
    },
    {
      "cve": "CVE-2025-43274",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43274"
    },
    {
      "cve": "CVE-2025-43275",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43275"
    },
    {
      "cve": "CVE-2025-43276",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43276"
    },
    {
      "cve": "CVE-2025-43277",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43277"
    },
    {
      "cve": "CVE-2025-43282",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43282"
    },
    {
      "cve": "CVE-2025-43284",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-43284"
    },
    {
      "cve": "CVE-2025-6558",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-6558"
    },
    {
      "cve": "CVE-2025-7424",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-7424"
    },
    {
      "cve": "CVE-2025-7425",
      "product_status": {
        "known_affected": [
          "T045720",
          "T045718",
          "T045719"
        ]
      },
      "release_date": "2025-07-29T22:00:00.000+00:00",
      "title": "CVE-2025-7425"
    }
  ]
}

WID-SEC-W-2025-1683

Vulnerability from csaf_certbund - Published: 2025-07-30 22:00 - Updated: 2026-03-22 23:00

Summary

Apple Safari: Mehrere Schwachstellen

Severity

Mittel

Notes

Produktbeschreibung: Safari ist der auf Apple Geräten eingesetzte Web Browser.

Angriff: Ein Angreifer kann mehrere Schwachstellen in Apple Safari ausnutzen, um Informationen offenzulegen, um einen Denial of Service Angriff durchzuführen, um einen Cross-Site Scripting Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.

Betroffene Betriebssysteme: - Linux - Sonstiges - UNIX

CVE-2025-24188

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Apple Safari <18.6 Apple / Safari		<18.6

CVE-2025-31273

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Apple Safari <18.6 Apple / Safari		<18.6

CVE-2025-31277

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Apple Safari <18.6 Apple / Safari		<18.6

CVE-2025-31278

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Apple Safari <18.6 Apple / Safari		<18.6

CVE-2025-43211

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Apple Safari <18.6 Apple / Safari		<18.6

CVE-2025-43212

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Apple Safari <18.6 Apple / Safari		<18.6

CVE-2025-43213

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Apple Safari <18.6 Apple / Safari		<18.6

CVE-2025-43214

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Apple Safari <18.6 Apple / Safari		<18.6

CVE-2025-43216

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Apple Safari <18.6 Apple / Safari		<18.6

CVE-2025-43227

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Apple Safari <18.6 Apple / Safari		<18.6

CVE-2025-43228

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Apple Safari <18.6 Apple / Safari		<18.6

CVE-2025-43229

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Apple Safari <18.6 Apple / Safari		<18.6

CVE-2025-43240

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Apple Safari <18.6 Apple / Safari		<18.6

CVE-2025-43265

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Apple Safari <18.6 Apple / Safari		<18.6

CVE-2025-6558

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Apple Safari <18.6 Apple / Safari		<18.6

CVE-2025-7424

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Apple Safari <18.6 Apple / Safari		<18.6

CVE-2025-7425

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Apple Safari <18.6 Apple / Safari		<18.6

References

4 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://support.apple.com/en-us/124152	external
https://www.cisa.gov/known-exploited-vulnerabilit…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Safari ist der auf Apple Ger\u00e4ten eingesetzte Web Browser.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in Apple Safari ausnutzen, um Informationen offenzulegen, um einen Denial of Service Angriff durchzuf\u00fchren, um einen Cross-Site Scripting Angriff durchzuf\u00fchren, und um Sicherheitsvorkehrungen zu umgehen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- Sonstiges\n- UNIX",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2025-1683 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1683.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2025-1683 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1683"
      },
      {
        "category": "external",
        "summary": "Apple Safari Security Updates vom 2025-07-30",
        "url": "https://support.apple.com/en-us/124152"
      },
      {
        "category": "external",
        "summary": "CISA Known Exploited Vulnerabilities Catalog vom 2026-03-22",
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
      }
    ],
    "source_lang": "en-US",
    "title": "Apple Safari: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-03-22T23:00:00.000+00:00",
      "generator": {
        "date": "2026-03-23T11:30:53.840+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.5.0"
        }
      },
      "id": "WID-SEC-W-2025-1683",
      "initial_release_date": "2025-07-30T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2025-07-30T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2026-03-22T23:00:00.000+00:00",
          "number": "2",
          "summary": "Aktive Ausnutzung gemeldet"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c18.6",
                "product": {
                  "name": "Apple Safari \u003c18.6",
                  "product_id": "T045768"
                }
              },
              {
                "category": "product_version",
                "name": "18.6",
                "product": {
                  "name": "Apple Safari 18.6",
                  "product_id": "T045768-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:apple:safari:18.6"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Safari"
          }
        ],
        "category": "vendor",
        "name": "Apple"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-24188",
      "product_status": {
        "known_affected": [
          "T045768"
        ]
      },
      "release_date": "2025-07-30T22:00:00.000+00:00",
      "title": "CVE-2025-24188"
    },
    {
      "cve": "CVE-2025-31273",
      "product_status": {
        "known_affected": [
          "T045768"
        ]
      },
      "release_date": "2025-07-30T22:00:00.000+00:00",
      "title": "CVE-2025-31273"
    },
    {
      "cve": "CVE-2025-31277",
      "product_status": {
        "known_affected": [
          "T045768"
        ]
      },
      "release_date": "2025-07-30T22:00:00.000+00:00",
      "title": "CVE-2025-31277"
    },
    {
      "cve": "CVE-2025-31278",
      "product_status": {
        "known_affected": [
          "T045768"
        ]
      },
      "release_date": "2025-07-30T22:00:00.000+00:00",
      "title": "CVE-2025-31278"
    },
    {
      "cve": "CVE-2025-43211",
      "product_status": {
        "known_affected": [
          "T045768"
        ]
      },
      "release_date": "2025-07-30T22:00:00.000+00:00",
      "title": "CVE-2025-43211"
    },
    {
      "cve": "CVE-2025-43212",
      "product_status": {
        "known_affected": [
          "T045768"
        ]
      },
      "release_date": "2025-07-30T22:00:00.000+00:00",
      "title": "CVE-2025-43212"
    },
    {
      "cve": "CVE-2025-43213",
      "product_status": {
        "known_affected": [
          "T045768"
        ]
      },
      "release_date": "2025-07-30T22:00:00.000+00:00",
      "title": "CVE-2025-43213"
    },
    {
      "cve": "CVE-2025-43214",
      "product_status": {
        "known_affected": [
          "T045768"
        ]
      },
      "release_date": "2025-07-30T22:00:00.000+00:00",
      "title": "CVE-2025-43214"
    },
    {
      "cve": "CVE-2025-43216",
      "product_status": {
        "known_affected": [
          "T045768"
        ]
      },
      "release_date": "2025-07-30T22:00:00.000+00:00",
      "title": "CVE-2025-43216"
    },
    {
      "cve": "CVE-2025-43227",
      "product_status": {
        "known_affected": [
          "T045768"
        ]
      },
      "release_date": "2025-07-30T22:00:00.000+00:00",
      "title": "CVE-2025-43227"
    },
    {
      "cve": "CVE-2025-43228",
      "product_status": {
        "known_affected": [
          "T045768"
        ]
      },
      "release_date": "2025-07-30T22:00:00.000+00:00",
      "title": "CVE-2025-43228"
    },
    {
      "cve": "CVE-2025-43229",
      "product_status": {
        "known_affected": [
          "T045768"
        ]
      },
      "release_date": "2025-07-30T22:00:00.000+00:00",
      "title": "CVE-2025-43229"
    },
    {
      "cve": "CVE-2025-43240",
      "product_status": {
        "known_affected": [
          "T045768"
        ]
      },
      "release_date": "2025-07-30T22:00:00.000+00:00",
      "title": "CVE-2025-43240"
    },
    {
      "cve": "CVE-2025-43265",
      "product_status": {
        "known_affected": [
          "T045768"
        ]
      },
      "release_date": "2025-07-30T22:00:00.000+00:00",
      "title": "CVE-2025-43265"
    },
    {
      "cve": "CVE-2025-6558",
      "product_status": {
        "known_affected": [
          "T045768"
        ]
      },
      "release_date": "2025-07-30T22:00:00.000+00:00",
      "title": "CVE-2025-6558"
    },
    {
      "cve": "CVE-2025-7424",
      "product_status": {
        "known_affected": [
          "T045768"
        ]
      },
      "release_date": "2025-07-30T22:00:00.000+00:00",
      "title": "CVE-2025-7424"
    },
    {
      "cve": "CVE-2025-7425",
      "product_status": {
        "known_affected": [
          "T045768"
        ]
      },
      "release_date": "2025-07-30T22:00:00.000+00:00",
      "title": "CVE-2025-7425"
    }
  ]
}

WID-SEC-W-2026-0782

Vulnerability from csaf_certbund - Published: 2026-03-18 23:00 - Updated: 2026-05-31 22:00

Summary

WebKitGTK: Mehrere Schwachstellen

Severity

Hoch

Notes

Produktbeschreibung: WebKitGTK ist ein Webbrowser. Dieser nutzt die WebKit-Engine, die auch von Safari und vielen anderen Apps auf macOS, iOS und Linux verwendet wird.

Angriff: Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in WebKitGTK ausnutzen, um beliebigen Programmcode auszuführen, einen Denial-of-Service-Zustand auszulösen oder vertrauliche Informationen offenzulegen.

Betroffene Betriebssysteme: - Sonstiges - UNIX

CVE-2023-43010

Affected products

Known affected 8 products

Product	Identifier	Version
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source WebKitGTK <2.44.0 Open Source / WebKitGTK		<2.44.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

CVE-2025-31223

Affected products

Known affected 9 products

Product	Identifier	Version
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Open Source WebKitGTK <2.50.0 Open Source / WebKitGTK		<2.50.0
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source WebKitGTK <2.44.0 Open Source / WebKitGTK		<2.44.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

CVE-2025-31277

Affected products

Known affected 9 products

Product	Identifier	Version
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Open Source WebKitGTK <2.50.0 Open Source / WebKitGTK		<2.50.0
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source WebKitGTK <2.44.0 Open Source / WebKitGTK		<2.44.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

CVE-2025-43213

Affected products

Known affected 10 products

Product	Identifier	Version
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Open Source WebKitGTK <2.50.0 Open Source / WebKitGTK		<2.50.0
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Open Source WebKitGTK <2.50.5 Open Source / WebKitGTK		<2.50.5
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source WebKitGTK <2.44.0 Open Source / WebKitGTK		<2.44.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

CVE-2025-43214

Affected products

Known affected 10 products

Product	Identifier	Version
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Open Source WebKitGTK <2.50.0 Open Source / WebKitGTK		<2.50.0
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Open Source WebKitGTK <2.50.5 Open Source / WebKitGTK		<2.50.5
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source WebKitGTK <2.44.0 Open Source / WebKitGTK		<2.44.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

CVE-2025-43511

Affected products

Known affected 10 products

Product	Identifier	Version
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Open Source WebKitGTK <2.50.0 Open Source / WebKitGTK		<2.50.0
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Open Source WebKitGTK <2.50.5 Open Source / WebKitGTK		<2.50.5
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source WebKitGTK <2.44.0 Open Source / WebKitGTK		<2.44.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

CVE-2025-43433

Affected products

Known affected 10 products

Product	Identifier	Version
Open Source WebKitGTK <2.50.2 Open Source / WebKitGTK		<2.50.2
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Open Source WebKitGTK <2.50.0 Open Source / WebKitGTK		<2.50.0
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source WebKitGTK <2.44.0 Open Source / WebKitGTK		<2.44.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

CVE-2025-43438

Affected products

Known affected 10 products

Product	Identifier	Version
Open Source WebKitGTK <2.50.2 Open Source / WebKitGTK		<2.50.2
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Open Source WebKitGTK <2.50.0 Open Source / WebKitGTK		<2.50.0
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source WebKitGTK <2.44.0 Open Source / WebKitGTK		<2.44.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

CVE-2025-43441

Affected products

Known affected 10 products

Product	Identifier	Version
Open Source WebKitGTK <2.50.2 Open Source / WebKitGTK		<2.50.2
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Open Source WebKitGTK <2.50.0 Open Source / WebKitGTK		<2.50.0
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source WebKitGTK <2.44.0 Open Source / WebKitGTK		<2.44.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

CVE-2025-43457

Affected products

Known affected 12 products

Product	Identifier	Version
Open Source WebKitGTK <2.50.2 Open Source / WebKitGTK		<2.50.2
Open Source WebKitGTK <2.50.6 Open Source / WebKitGTK		<2.50.6
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Open Source WebKitGTK <2.50.0 Open Source / WebKitGTK		<2.50.0
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Open Source WebKitGTK <2.50.5 Open Source / WebKitGTK		<2.50.5
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source WebKitGTK <2.44.0 Open Source / WebKitGTK		<2.44.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

CVE-2026-20608

Affected products

Known affected 12 products

Product	Identifier	Version
Open Source WebKitGTK <2.50.2 Open Source / WebKitGTK		<2.50.2
Open Source WebKitGTK <2.50.6 Open Source / WebKitGTK		<2.50.6
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Open Source WebKitGTK <2.50.0 Open Source / WebKitGTK		<2.50.0
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Open Source WebKitGTK <2.50.5 Open Source / WebKitGTK		<2.50.5
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source WebKitGTK <2.44.0 Open Source / WebKitGTK		<2.44.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

CVE-2026-20635

Affected products

Known affected 12 products

Product	Identifier	Version
Open Source WebKitGTK <2.50.2 Open Source / WebKitGTK		<2.50.2
Open Source WebKitGTK <2.50.6 Open Source / WebKitGTK		<2.50.6
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Open Source WebKitGTK <2.50.0 Open Source / WebKitGTK		<2.50.0
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Open Source WebKitGTK <2.50.5 Open Source / WebKitGTK		<2.50.5
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source WebKitGTK <2.44.0 Open Source / WebKitGTK		<2.44.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

CVE-2026-20636

Affected products

Known affected 12 products

Product	Identifier	Version
Open Source WebKitGTK <2.50.2 Open Source / WebKitGTK		<2.50.2
Open Source WebKitGTK <2.50.6 Open Source / WebKitGTK		<2.50.6
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Open Source WebKitGTK <2.50.0 Open Source / WebKitGTK		<2.50.0
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Open Source WebKitGTK <2.50.5 Open Source / WebKitGTK		<2.50.5
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source WebKitGTK <2.44.0 Open Source / WebKitGTK		<2.44.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

CVE-2026-20644

Affected products

Known affected 12 products

Product	Identifier	Version
Open Source WebKitGTK <2.50.2 Open Source / WebKitGTK		<2.50.2
Open Source WebKitGTK <2.50.6 Open Source / WebKitGTK		<2.50.6
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Open Source WebKitGTK <2.50.0 Open Source / WebKitGTK		<2.50.0
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Open Source WebKitGTK <2.50.5 Open Source / WebKitGTK		<2.50.5
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source WebKitGTK <2.44.0 Open Source / WebKitGTK		<2.44.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

CVE-2026-20652

Affected products

Known affected 12 products

Product	Identifier	Version
Open Source WebKitGTK <2.50.2 Open Source / WebKitGTK		<2.50.2
Open Source WebKitGTK <2.50.6 Open Source / WebKitGTK		<2.50.6
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Open Source WebKitGTK <2.50.0 Open Source / WebKitGTK		<2.50.0
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Open Source WebKitGTK <2.50.5 Open Source / WebKitGTK		<2.50.5
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source WebKitGTK <2.44.0 Open Source / WebKitGTK		<2.44.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

CVE-2026-20676

Affected products

Known affected 12 products

Product	Identifier	Version
Open Source WebKitGTK <2.50.2 Open Source / WebKitGTK		<2.50.2
Open Source WebKitGTK <2.50.6 Open Source / WebKitGTK		<2.50.6
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Open Source WebKitGTK <2.50.0 Open Source / WebKitGTK		<2.50.0
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Open Source WebKitGTK <2.50.5 Open Source / WebKitGTK		<2.50.5
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source WebKitGTK <2.44.0 Open Source / WebKitGTK		<2.44.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

CVE-2025-46299

Affected products

Known affected 13 products

Product	Identifier	Version
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—
Open Source WebKitGTK <2.52.0 Open Source / WebKitGTK		<2.52.0
Open Source WebKitGTK <2.50.2 Open Source / WebKitGTK		<2.50.2
Open Source WebKitGTK <2.50.6 Open Source / WebKitGTK		<2.50.6
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Open Source WebKitGTK <2.50.0 Open Source / WebKitGTK		<2.50.0
Open Source WebKitGTK <2.50.5 Open Source / WebKitGTK		<2.50.5
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source WebKitGTK <2.44.0 Open Source / WebKitGTK		<2.44.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—

References

29 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://webkitgtk.org/security/WSA-2026-0001.html	external
https://security-tracker.debian.org/tracker/DSA-6172-1	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://alas.aws.amazon.com/AL2/ALAS2-2026-3223.html	external
https://lists.debian.org/debian-lts-announce/2026…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://access.redhat.com/errata/RHSA-2026:9692	external
https://linux.oracle.com/errata/ELSA-2026-9692.html	external
https://errata.build.resf.org/RLSA-2026:9692	external
https://access.redhat.com/errata/RHSA-2026:10702	external
https://errata.build.resf.org/RLSA-2026:10702	external
https://access.redhat.com/errata/RHSA-2026:11329	external
https://linux.oracle.com/errata/ELSA-2026-10702.html	external
https://lists.debian.org/debian-security-announce…	external
https://access.redhat.com/errata/RHSA-2026:11814	external
https://alas.aws.amazon.com/AL2/ALAS2-2026-3270.html	external
https://access.redhat.com/errata/RHSA-2026:13845	external
https://access.redhat.com/errata/RHSA-2026:14659	external
https://ubuntu.com/security/notices/USN-8237-1	external
https://access.redhat.com/errata/RHSA-2026:16056	external
https://access.redhat.com/errata/RHSA-2026:16695	external
https://access.redhat.com/errata/RHSA-2026:19535	external
https://access.redhat.com/errata/RHSA-2026:19206	external
https://errata.build.resf.org/RLSA-2026:19206	external
https://access.redhat.com/errata/RHSA-2026:22136	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "WebKitGTK ist ein Webbrowser. Dieser nutzt die WebKit-Engine, die auch von Safari und vielen anderen Apps auf macOS, iOS und Linux verwendet wird.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in WebKitGTK ausnutzen, um beliebigen Programmcode auszuf\u00fchren, einen Denial-of-Service-Zustand auszul\u00f6sen oder vertrauliche Informationen offenzulegen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Sonstiges\n- UNIX",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-0782 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0782.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-0782 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0782"
      },
      {
        "category": "external",
        "summary": "WebKitGTK and WPE WebKit Security Advisory WSA-2026-0001 vom 2026-03-18",
        "url": "https://webkitgtk.org/security/WSA-2026-0001.html"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-6172 vom 2026-03-21",
        "url": "https://security-tracker.debian.org/tracker/DSA-6172-1"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2026:1139-1 vom 2026-03-31",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-March/025063.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2026:1150-1 vom 2026-03-31",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-March/025065.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS2-2026-3223 vom 2026-04-01",
        "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3223.html"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-4528 vom 2026-04-11",
        "url": "https://lists.debian.org/debian-lts-announce/2026/04/msg00007.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2026:1364-1 vom 2026-04-15",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-April/025356.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2026:21180-1 vom 2026-04-21",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-April/025532.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:9692 vom 2026-04-22",
        "url": "https://access.redhat.com/errata/RHSA-2026:9692"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-9692 vom 2026-04-22",
        "url": "https://linux.oracle.com/errata/ELSA-2026-9692.html"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2026:9692 vom 2026-04-24",
        "url": "https://errata.build.resf.org/RLSA-2026:9692"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:10702 vom 2026-04-27",
        "url": "https://access.redhat.com/errata/RHSA-2026:10702"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2026:10702 vom 2026-04-27",
        "url": "https://errata.build.resf.org/RLSA-2026:10702"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:11329 vom 2026-04-28",
        "url": "https://access.redhat.com/errata/RHSA-2026:11329"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-10702 vom 2026-04-28",
        "url": "https://linux.oracle.com/errata/ELSA-2026-10702.html"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-6232 vom 2026-04-28",
        "url": "https://lists.debian.org/debian-security-announce/2026/msg00142.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:11814 vom 2026-04-29",
        "url": "https://access.redhat.com/errata/RHSA-2026:11814"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS2-2026-3270 vom 2026-04-30",
        "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3270.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:13845 vom 2026-05-05",
        "url": "https://access.redhat.com/errata/RHSA-2026:13845"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:14659 vom 2026-05-07",
        "url": "https://access.redhat.com/errata/RHSA-2026:14659"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-8237-1 vom 2026-05-06",
        "url": "https://ubuntu.com/security/notices/USN-8237-1"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:16056 vom 2026-05-11",
        "url": "https://access.redhat.com/errata/RHSA-2026:16056"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:16695 vom 2026-05-13",
        "url": "https://access.redhat.com/errata/RHSA-2026:16695"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:19535 vom 2026-05-20",
        "url": "https://access.redhat.com/errata/RHSA-2026:19535"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:19206 vom 2026-05-20",
        "url": "https://access.redhat.com/errata/RHSA-2026:19206"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2026:19206 vom 2026-05-28",
        "url": "https://errata.build.resf.org/RLSA-2026:19206"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:22136 vom 2026-06-01",
        "url": "https://access.redhat.com/errata/RHSA-2026:22136"
      }
    ],
    "source_lang": "en-US",
    "title": "WebKitGTK: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-05-31T22:00:00.000+00:00",
      "generator": {
        "date": "2026-06-01T07:24:01.812+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.6.0"
        }
      },
      "id": "WID-SEC-W-2026-0782",
      "initial_release_date": "2026-03-18T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-03-18T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2026-03-22T23:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2026-03-30T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2026-04-01T22:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2026-04-12T22:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2026-04-15T22:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2026-04-21T22:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2026-04-22T22:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2026-04-26T22:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von Rocky Enterprise Software Foundation und Red Hat aufgenommen"
        },
        {
          "date": "2026-04-27T22:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von Rocky Enterprise Software Foundation aufgenommen"
        },
        {
          "date": "2026-04-28T22:00:00.000+00:00",
          "number": "11",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2026-04-29T22:00:00.000+00:00",
          "number": "12",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-05-05T22:00:00.000+00:00",
          "number": "13",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-05-06T22:00:00.000+00:00",
          "number": "14",
          "summary": "Neue Updates von Red Hat und Ubuntu aufgenommen"
        },
        {
          "date": "2026-05-11T22:00:00.000+00:00",
          "number": "15",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-05-12T22:00:00.000+00:00",
          "number": "16",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-05-19T22:00:00.000+00:00",
          "number": "17",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-05-28T22:00:00.000+00:00",
          "number": "18",
          "summary": "Neue Updates von Rocky Enterprise Software Foundation aufgenommen"
        },
        {
          "date": "2026-05-31T22:00:00.000+00:00",
          "number": "19",
          "summary": "Neue Updates von Red Hat aufgenommen"
        }
      ],
      "status": "final",
      "version": "19"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Amazon Linux 2",
            "product": {
              "name": "Amazon Linux 2",
              "product_id": "398363",
              "product_identification_helper": {
                "cpe": "cpe:/o:amazon:linux_2:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Amazon"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Debian Linux",
            "product": {
              "name": "Debian Linux",
              "product_id": "2951",
              "product_identification_helper": {
                "cpe": "cpe:/o:debian:debian_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Debian"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c2.44.0",
                "product": {
                  "name": "Open Source WebKitGTK \u003c2.44.0",
                  "product_id": "T051900"
                }
              },
              {
                "category": "product_version",
                "name": "2.44.0",
                "product": {
                  "name": "Open Source WebKitGTK 2.44.0",
                  "product_id": "T051900-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:webkitgtk:webkitgtk:2.44.0"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c2.50.0",
                "product": {
                  "name": "Open Source WebKitGTK \u003c2.50.0",
                  "product_id": "T051901"
                }
              },
              {
                "category": "product_version",
                "name": "2.50.0",
                "product": {
                  "name": "Open Source WebKitGTK 2.50.0",
                  "product_id": "T051901-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:webkitgtk:webkitgtk:2.50.0"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c2.50.5",
                "product": {
                  "name": "Open Source WebKitGTK \u003c2.50.5",
                  "product_id": "T051902"
                }
              },
              {
                "category": "product_version",
                "name": "2.50.5",
                "product": {
                  "name": "Open Source WebKitGTK 2.50.5",
                  "product_id": "T051902-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:webkitgtk:webkitgtk:2.50.5"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c2.50.2",
                "product": {
                  "name": "Open Source WebKitGTK \u003c2.50.2",
                  "product_id": "T051903"
                }
              },
              {
                "category": "product_version",
                "name": "2.50.2",
                "product": {
                  "name": "Open Source WebKitGTK 2.50.2",
                  "product_id": "T051903-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:webkitgtk:webkitgtk:2.50.2"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c2.50.6",
                "product": {
                  "name": "Open Source WebKitGTK \u003c2.50.6",
                  "product_id": "T051904"
                }
              },
              {
                "category": "product_version",
                "name": "2.50.6",
                "product": {
                  "name": "Open Source WebKitGTK 2.50.6",
                  "product_id": "T051904-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:webkitgtk:webkitgtk:2.50.6"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c2.52.0",
                "product": {
                  "name": "Open Source WebKitGTK \u003c2.52.0",
                  "product_id": "T051905"
                }
              },
              {
                "category": "product_version",
                "name": "2.52.0",
                "product": {
                  "name": "Open Source WebKitGTK 2.52.0",
                  "product_id": "T051905-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:webkitgtk:webkitgtk:2.52.0"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "WebKitGTK"
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T004914",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "RESF Rocky Linux",
            "product": {
              "name": "RESF Rocky Linux",
              "product_id": "T032255",
              "product_identification_helper": {
                "cpe": "cpe:/o:resf:rocky_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "RESF"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T000126",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-43010",
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "67646",
          "T000126",
          "T051900",
          "398363",
          "T004914",
          "T032255"
        ]
      },
      "release_date": "2026-03-18T23:00:00.000+00:00",
      "title": "CVE-2023-43010"
    },
    {
      "cve": "CVE-2025-31223",
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "T051901",
          "67646",
          "T000126",
          "T051900",
          "398363",
          "T004914",
          "T032255"
        ]
      },
      "release_date": "2026-03-18T23:00:00.000+00:00",
      "title": "CVE-2025-31223"
    },
    {
      "cve": "CVE-2025-31277",
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "T051901",
          "67646",
          "T000126",
          "T051900",
          "398363",
          "T004914",
          "T032255"
        ]
      },
      "release_date": "2026-03-18T23:00:00.000+00:00",
      "title": "CVE-2025-31277"
    },
    {
      "cve": "CVE-2025-43213",
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "T051901",
          "67646",
          "T051902",
          "T000126",
          "T051900",
          "398363",
          "T004914",
          "T032255"
        ]
      },
      "release_date": "2026-03-18T23:00:00.000+00:00",
      "title": "CVE-2025-43213"
    },
    {
      "cve": "CVE-2025-43214",
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "T051901",
          "67646",
          "T051902",
          "T000126",
          "T051900",
          "398363",
          "T004914",
          "T032255"
        ]
      },
      "release_date": "2026-03-18T23:00:00.000+00:00",
      "title": "CVE-2025-43214"
    },
    {
      "cve": "CVE-2025-43511",
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "T051901",
          "67646",
          "T051902",
          "T000126",
          "T051900",
          "398363",
          "T004914",
          "T032255"
        ]
      },
      "release_date": "2026-03-18T23:00:00.000+00:00",
      "title": "CVE-2025-43511"
    },
    {
      "cve": "CVE-2025-43433",
      "product_status": {
        "known_affected": [
          "T051903",
          "2951",
          "T002207",
          "T051901",
          "67646",
          "T000126",
          "T051900",
          "398363",
          "T004914",
          "T032255"
        ]
      },
      "release_date": "2026-03-18T23:00:00.000+00:00",
      "title": "CVE-2025-43433"
    },
    {
      "cve": "CVE-2025-43438",
      "product_status": {
        "known_affected": [
          "T051903",
          "2951",
          "T002207",
          "T051901",
          "67646",
          "T000126",
          "T051900",
          "398363",
          "T004914",
          "T032255"
        ]
      },
      "release_date": "2026-03-18T23:00:00.000+00:00",
      "title": "CVE-2025-43438"
    },
    {
      "cve": "CVE-2025-43441",
      "product_status": {
        "known_affected": [
          "T051903",
          "2951",
          "T002207",
          "T051901",
          "67646",
          "T000126",
          "T051900",
          "398363",
          "T004914",
          "T032255"
        ]
      },
      "release_date": "2026-03-18T23:00:00.000+00:00",
      "title": "CVE-2025-43441"
    },
    {
      "cve": "CVE-2025-43457",
      "product_status": {
        "known_affected": [
          "T051903",
          "T051904",
          "2951",
          "T002207",
          "T051901",
          "67646",
          "T051902",
          "T000126",
          "T051900",
          "398363",
          "T004914",
          "T032255"
        ]
      },
      "release_date": "2026-03-18T23:00:00.000+00:00",
      "title": "CVE-2025-43457"
    },
    {
      "cve": "CVE-2026-20608",
      "product_status": {
        "known_affected": [
          "T051903",
          "T051904",
          "2951",
          "T002207",
          "T051901",
          "67646",
          "T051902",
          "T000126",
          "T051900",
          "398363",
          "T004914",
          "T032255"
        ]
      },
      "release_date": "2026-03-18T23:00:00.000+00:00",
      "title": "CVE-2026-20608"
    },
    {
      "cve": "CVE-2026-20635",
      "product_status": {
        "known_affected": [
          "T051903",
          "T051904",
          "2951",
          "T002207",
          "T051901",
          "67646",
          "T051902",
          "T000126",
          "T051900",
          "398363",
          "T004914",
          "T032255"
        ]
      },
      "release_date": "2026-03-18T23:00:00.000+00:00",
      "title": "CVE-2026-20635"
    },
    {
      "cve": "CVE-2026-20636",
      "product_status": {
        "known_affected": [
          "T051903",
          "T051904",
          "2951",
          "T002207",
          "T051901",
          "67646",
          "T051902",
          "T000126",
          "T051900",
          "398363",
          "T004914",
          "T032255"
        ]
      },
      "release_date": "2026-03-18T23:00:00.000+00:00",
      "title": "CVE-2026-20636"
    },
    {
      "cve": "CVE-2026-20644",
      "product_status": {
        "known_affected": [
          "T051903",
          "T051904",
          "2951",
          "T002207",
          "T051901",
          "67646",
          "T051902",
          "T000126",
          "T051900",
          "398363",
          "T004914",
          "T032255"
        ]
      },
      "release_date": "2026-03-18T23:00:00.000+00:00",
      "title": "CVE-2026-20644"
    },
    {
      "cve": "CVE-2026-20652",
      "product_status": {
        "known_affected": [
          "T051903",
          "T051904",
          "2951",
          "T002207",
          "T051901",
          "67646",
          "T051902",
          "T000126",
          "T051900",
          "398363",
          "T004914",
          "T032255"
        ]
      },
      "release_date": "2026-03-18T23:00:00.000+00:00",
      "title": "CVE-2026-20652"
    },
    {
      "cve": "CVE-2026-20676",
      "product_status": {
        "known_affected": [
          "T051903",
          "T051904",
          "2951",
          "T002207",
          "T051901",
          "67646",
          "T051902",
          "T000126",
          "T051900",
          "398363",
          "T004914",
          "T032255"
        ]
      },
      "release_date": "2026-03-18T23:00:00.000+00:00",
      "title": "CVE-2026-20676"
    },
    {
      "cve": "CVE-2025-46299",
      "product_status": {
        "known_affected": [
          "67646",
          "T004914",
          "T032255",
          "T051905",
          "T051903",
          "T051904",
          "2951",
          "T002207",
          "T051901",
          "T051902",
          "T000126",
          "T051900",
          "398363"
        ]
      },
      "release_date": "2026-03-18T23:00:00.000+00:00",
      "title": "CVE-2025-46299"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2025-31277 (GCVE-0-2025-31277)

CISA

Known Exploited Vulnerability - GCVE BCP-07 Compliant

Timestamps

Scope

Evidence

Vendor Report Successful Exploitation Confidence: 80% Source: cisa-kev

Details

References

KEVIntel

Known Exploited Vulnerability - GCVE BCP-07 Compliant

Timestamps

Scope

Evidence

Public Report Successful Exploitation Confidence: 70% Source: kevintel

Details

References

WID-SEC-W-2025-1668

WID-SEC-W-2025-1672

WID-SEC-W-2025-1683

WID-SEC-W-2026-0782

Tags

Sightings

Nomenclature