CVE-2025-31223
moderate-risk
Published 2025-05-12
The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to memory corruption.
Do I need to act?
-
0.52% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.0/10
High
NETWORK
/ LOW complexity
Affected Vendors
References (11)
Release Notes
https://support.apple.com/en-us/122404
Release Notes
https://support.apple.com/en-us/122716
Release Notes
https://support.apple.com/en-us/122719
Release Notes
https://support.apple.com/en-us/122720
Release Notes
https://support.apple.com/en-us/122721
Release Notes
https://support.apple.com/en-us/122722
44
/ 100
moderate-risk
Severity
28/34 · Critical
Exploitability
2/34 · Minimal
Exposure
14/34 · Moderate