CVE-2025-31238
moderate-risk
Published 2025-05-12
The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to memory corruption.
Do I need to act?
~
1.3% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.3/10
High
NETWORK
/ LOW complexity
Affected Vendors
References (11)
Release Notes
https://support.apple.com/en-us/122404
Release Notes
https://support.apple.com/en-us/122716
Release Notes
https://support.apple.com/en-us/122719
Release Notes
https://support.apple.com/en-us/122720
Release Notes
https://support.apple.com/en-us/122721
Release Notes
https://support.apple.com/en-us/122722
44
/ 100
moderate-risk
Severity
26/34 · High
Exploitability
4/34 · Minimal
Exposure
14/34 · Moderate