CVE-2025-24213

HOCH 7.8CVE-2025-24213 · Published 31/03/2025 · updated 17/06/2026

Kurz gesagt

CVE-2025-24213 ist eine Schwachstelle (HOCH (CVSS 7.8)) in safari (apple).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.43%, höher als bei 37.2% aller Schwachstellen.
Abhilfe: auf 18.4 oder neuer aktualisieren.

Package	Affected versions	Patched versions
safari apple	`< 18.4`	`18.4`

Description

This issue was addressed with improved handling of floats. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. A type confusion issue could lead to memory corruption.

References

support.apple.com/en-us/122404
support.apple.com/en-us/122405
support.apple.com/en-us/122716
support.apple.com/en-us/122719
support.apple.com/en-us/122720
support.apple.com/en-us/122721
support.apple.com/en-us/122722
seclists.org/fulldisclosure/2025/Apr/11
seclists.org/fulldisclosure/2025/Apr/13
seclists.org/fulldisclosure/2025/Apr/2
seclists.org/fulldisclosure/2025/Apr/4
seclists.org/fulldisclosure/2025/Apr/5
seclists.org/fulldisclosure/2025/Apr/8
seclists.org/fulldisclosure/2025/May/10
seclists.org/fulldisclosure/2025/May/11
seclists.org/fulldisclosure/2025/May/13

Weitere Schwachstellen in safari

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free