CVE-2025-24189

moderate-risk

Published 2025-05-19

The issue was addressed with improved checks. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, tvOS 18.3, visionOS 2.3, watchOS 11.3. Processing maliciously crafted web content may lead to memory corruption.

Do I need to act?

0.91% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 8.8/10 High

NETWORK / LOW complexity

Affected Products (7)

Safari

Ipados

Iphone Os

Macos

Tvos

Visionos

Watchos

Affected Vendors

Apple

References (7)

Release Notes https://support.apple.com/en-us/122066

Release Notes https://support.apple.com/en-us/122068

Release Notes https://support.apple.com/en-us/122071

Release Notes https://support.apple.com/en-us/122072

Release Notes https://support.apple.com/en-us/122073

Release Notes https://support.apple.com/en-us/122074

http://www.openwall.com/lists/oss-security/2025/08/02/1

/ 100

moderate-risk

Severity 30/34 · Critical

Exploitability 3/34 · Minimal

Exposure 14/34 · Moderate