CVE-2025-24201
CVE-2025-24201
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.2 and iPadOS 18.3.2, iPadOS 17.7.6, macOS Sequoia 15.3.2, visionOS 2.3.2, watchOS 11.4. Maliciously crafted web content may be able to break out of Web Content sandbox. This is a supplementary fix for an attack that was blocked in iOS 17.2. (Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.).
CVSS 10.0 · Critical · EPSS 3.8% · In KEV · Public exploit · Fix available
- Published
- Updated
Stack: system
Affected products and versions
safari
- Versions
- ≥ 0, < 18.3.1: Affected (custom)
Update to 18.3.1
ios and ipados
- Versions
- ≥ 0, < 15.8.4: Affected (custom)
- ≥ 0, < 16.7.11: Affected (custom)
- ≥ 0, < 18.3.2: Affected (custom)
Update to 15.8.4
ipados
- Versions
- ≥ 0, < 17.7.6: Affected (custom)
Update to 17.7.6
macos
- Versions
- ≥ 0, < 15.3.2: Affected (custom)
Update to 15.3.2
visionos
- Versions
- ≥ 0, < 2.3.2: Affected (custom)
Update to 2.3.2
watchos
- Versions
- ≥ 0, < 11.4: Affected (custom)
Update to 11.4
chromium Debian:12
- Versions
- 113.0.5672.126-1
- 114.0.5735.106-1
- 114.0.5735.106-1~deb11u1
- 114.0.5735.106-1~deb12u1
- 114.0.5735.133-1
- 114.0.5735.133-1~deb11u1
- 114.0.5735.133-1~deb12u1
- 114.0.5735.198-1
- 114.0.5735.198-1~deb11u1
- 114.0.5735.198-1~deb12u1
- 114.0.5735.90-1
- 114.0.5735.90-2
- 114.0.5735.90-2~deb11u1
- 114.0.5735.90-2~deb12u1
- 115.0.5790.102-1
- 115.0.5790.102-2
- 115.0.5790.170-1
- 115.0.5790.170-1~deb11u1
- 115.0.5790.170-1~deb12u1
- 115.0.5790.98-1
- 115.0.5790.98-1~deb11u1
- 115.0.5790.98-1~deb12u1
- 115.0.5790.98-2
- 116.0.5845.110-1
- 116.0.5845.110-1~deb11u1
- 116.0.5845.110-1~deb12u1
- 116.0.5845.110-2
- 116.0.5845.140-1
- 116.0.5845.140-1~deb11u1
- 116.0.5845.140-1~deb12u1
- 116.0.5845.180-1
- 116.0.5845.180-1~deb11u1
- 116.0.5845.180-1~deb12u1
- 116.0.5845.96-1
- 116.0.5845.96-1~deb11u1
- 116.0.5845.96-1~deb12u1
- 116.0.5845.96-2
- 117.0.5938.132-1
- 117.0.5938.132-1~deb11u1
- 117.0.5938.132-1~deb12u1
- 117.0.5938.132-2
- 117.0.5938.149-1
- 117.0.5938.149-1~deb11u1
- 117.0.5938.149-1~deb12u1
- 117.0.5938.62-1
- 117.0.5938.62-1~deb11u1
- 117.0.5938.62-1~deb12u1
- 117.0.5938.92-1
- 118.0.5993.117-1
- 118.0.5993.117-1~deb11u1
- 118.0.5993.117-1~deb12u1
- 118.0.5993.70-1
- 118.0.5993.70-1~deb11u1
- 118.0.5993.70-1~deb12u1
- 119.0.6045.105-1
- 119.0.6045.105-1~deb11u1
- 119.0.6045.105-1~deb12u1
- 119.0.6045.123-1
- 119.0.6045.123-1~deb11u1
- 119.0.6045.123-1~deb12u1
- 119.0.6045.159-1
- 119.0.6045.159-1~deb11u1
- 119.0.6045.159-1~deb12u1
- 119.0.6045.199-1
- 119.0.6045.199-1~deb11u1
- 119.0.6045.199-1~deb12u1
- 120.0.6099.109-1
- 120.0.6099.109-1~deb11u1
- 120.0.6099.109-1~deb12u1
- 120.0.6099.129-1
- 120.0.6099.129-1~deb11u1
- 120.0.6099.129-1~deb12u1
- 120.0.6099.199-1
- 120.0.6099.199-1~deb11u1
- 120.0.6099.199-1~deb12u1
- 120.0.6099.216-1
- 120.0.6099.216-1~deb11u1
- 120.0.6099.216-1~deb12u1
- 120.0.6099.224-1
- 120.0.6099.224-1~deb11u1
- 120.0.6099.224-1~deb12u1
- 120.0.6099.224-2
- 120.0.6099.71-1
- 120.0.6099.71-1~deb11u1
- 120.0.6099.71-1~deb12u1
- 121.0.6167.139-1
- 121.0.6167.139-1~deb12u1
- 121.0.6167.160-1
- 121.0.6167.160-1~deb12u1
- 121.0.6167.85-1
- 121.0.6167.85-1~deb12u1
- 122.0.6261.111-1
- 122.0.6261.111-1~deb12u1
- 122.0.6261.128-1
- 122.0.6261.128-1~deb12u1
- 122.0.6261.57-1
- 122.0.6261.57-1~deb12u1
- 122.0.6261.94-1
- 122.0.6261.94-1~deb12u1
- 123.0.6312.105-1
- 123.0.6312.105-1~deb12u1
- 123.0.6312.105-1~deb13u1
- 123.0.6312.105-2
- 123.0.6312.122-1
- 123.0.6312.122-1~deb12u1
- 123.0.6312.58-1
- 123.0.6312.86-1
- 123.0.6312.86-1~deb12u1
- 124.0.6367.118-1
- 124.0.6367.118-1~deb12u1
- 124.0.6367.155-1
- 124.0.6367.155-1~deb12u1
- 124.0.6367.201-1
- 124.0.6367.201-1~deb12u1
- 124.0.6367.207-1
- 124.0.6367.207-1~deb12u1
- 124.0.6367.60-1
- 124.0.6367.60-1~deb12u1
- 124.0.6367.60-2
- 124.0.6367.78-1
- 124.0.6367.78-1~deb12u1
- 125.0.6422.112-1
- 125.0.6422.112-1~deb12u1
- 125.0.6422.141-1
- 125.0.6422.141-1~deb12u1
- 125.0.6422.60-1
- 125.0.6422.60-1~deb12u1
- 125.0.6422.76-1
- 125.0.6422.76-1~deb12u1
- 126.0.6478.114-1
- 126.0.6478.114-1~deb12u1
- 126.0.6478.126-1
- 126.0.6478.126-1~deb12u1
- 126.0.6478.126-1~deb13u1
- 126.0.6478.182-1
- 126.0.6478.182-1~deb12u1
- 126.0.6478.56-1
- 126.0.6478.56-1~deb12u1
- 127.0.6533.119-1
- 127.0.6533.119-1~deb13u1
- 127.0.6533.88-1
- 127.0.6533.88-1~deb12u1
- 127.0.6533.99-1
- 127.0.6533.99-1~deb12u1
- 128.0.6613.113-1
- 128.0.6613.113-1~deb12u1
- 128.0.6613.113-1~deb13u1
- 128.0.6613.119-1
- 128.0.6613.119-1~deb12u1
- 128.0.6613.137-1
- 128.0.6613.137-1~deb12u1
- 128.0.6613.84-1
- 128.0.6613.84-1~deb12u1
- 129.0.6668.100-1
- 129.0.6668.100-1~deb12u1
- 129.0.6668.100-2
- 129.0.6668.58-1
- 129.0.6668.58-1~deb12u1
- 129.0.6668.70-1
- 129.0.6668.70-1~deb12u1
- 129.0.6668.89-1
- 129.0.6668.89-1~deb12u1
- 130.0.6723.116-1
- 130.0.6723.116-1~deb12u1
- 130.0.6723.58-1
- 130.0.6723.58-1~deb12u1
- 130.0.6723.69-1
- 130.0.6723.69-1~deb12u1
- 130.0.6723.91-1
- 130.0.6723.91-1~deb12u1
- 130.0.6723.91-2
- 131.0.6778.108-1
- 131.0.6778.108-1~deb12u1
- 131.0.6778.139-1
- 131.0.6778.139-1~deb12u1
- 131.0.6778.204-1
- 131.0.6778.204-1~deb12u1
- 131.0.6778.264-1
- 131.0.6778.264-1~deb12u1
- 131.0.6778.85-1
- 131.0.6778.85-1~deb12u1
- 132.0.6834.110-1
- 132.0.6834.110-1~deb12u1
- 132.0.6834.159-1
- 132.0.6834.159-1~deb12u1
- 132.0.6834.83-1
- 133.0.6943.126-1
Update to 134.0.6998.88-1~deb12u1
webkit2gtk Debian:12
- Versions
- 2.40.1-1
- 2.40.2-1
- 2.40.2-1~deb11u1
- 2.40.2-1~deb12u1
- 2.40.3-1
- 2.40.3-2
- 2.40.3-2~deb11u1
- 2.40.3-2~deb11u2
- 2.40.3-2~deb12u1
- 2.40.3-2~deb12u2
- 2.40.4-1
- 2.40.5-1
- 2.40.5-1~deb11u1
- 2.40.5-1~deb12u1
- 2.41.4-1
- 2.41.5-1
- 2.41.6-1
- 2.41.90-1
- 2.41.91-1
- 2.41.91-2
- 2.41.92-1
- 2.42.0-1
- 2.42.0-1~bpo12+1
- 2.42.1-1
- 2.42.1-1~bpo12+1
- 2.42.1-1~deb11u1
- 2.42.1-1~deb11u2
- 2.42.1-1~deb12u1
- 2.42.1-2
- 2.42.2-1
- 2.42.2-1~deb11u1
- 2.42.2-1~deb12u1
- 2.42.3-1
- 2.42.3-1~deb11u1
- 2.42.3-1~deb12u1
- 2.42.4-1
- 2.42.4-1~deb11u1
- 2.42.4-1~deb12u1
- 2.42.5-1
- 2.42.5-1~deb11u1
- 2.42.5-1~deb12u1
- 2.42.5-2
- 2.43.1-1
- 2.43.2-1
- 2.43.3-1
- 2.43.4-1
- 2.43.4-2
- 2.44.0-1
- 2.44.0-2
- 2.44.1-1
- 2.44.1-1~deb11u1
- 2.44.1-1~deb12u1
- 2.44.2-1
- 2.44.2-1~deb11u1
- 2.44.2-1~deb12u1
- 2.44.3-1
- 2.44.3-1~deb11u1
- 2.44.3-1~deb12u1
- 2.44.4-1
- 2.45.1-1
- 2.45.1-2
- 2.45.2-1
- 2.45.3-1
- 2.45.4-1
- 2.45.5-1
- 2.45.6-1
- 2.45.91-1
- 2.45.92-1
- 2.46.0-1
- 2.46.0-2
- 2.46.0-2~deb12u1
- 2.46.1-1
- 2.46.1-2
- 2.46.1-2~bpo12+1
- 2.46.2-1
- 2.46.3-1
- 2.46.3-1~deb11u1
- 2.46.3-1~deb11u2
- 2.46.3-1~deb12u1
- 2.46.4-1
- 2.46.4-1~deb11u1
- 2.46.4-1~deb12u1
- 2.46.5-1
- 2.46.5-1+hurd.1
- 2.46.5-1+hurd.2
- 2.46.5-1~deb11u1
- 2.46.5-1~deb12u1
- 2.46.6-1
- 2.46.6-1~deb11u1
- 2.46.6-1~deb12u1
- 2.47.1-1
- 2.47.2-1
- 2.47.3-1
- 2.47.4-1
- 2.47.90-1
- Affected ranges
- ECOSYSTEM: < 2.48.0-1~deb12u1
Update to 2.48.0-1~deb12u1
webkit2gtk Debian:13
- Affected ranges
- ECOSYSTEM: < 2.48.0-1
Update to 2.48.0-1
webkit2gtk Debian:14
- Affected ranges
- ECOSYSTEM: < 2.48.0-1
Update to 2.48.0-1
wpewebkit Debian:12
- Versions
- 2.38.6-1
- 2.39.91-1
- 2.40.0-1
- 2.40.1-1
- 2.40.2-1
- 2.40.2-2
- 2.40.3-1
- 2.40.4-1
- 2.40.5-1
- 2.42.0-1
- 2.42.1-1
- 2.42.2-1
- 2.42.3-1
- 2.42.4-1
- 2.42.5-1
- 2.42.5-1.1
- 2.42.5-1.1~exp1
- 2.42.5-1.2
- 2.42.5-2~exp
- 2.44.1-1
- 2.44.2-1
- 2.44.2-2
- 2.44.3-1
- 2.44.4-1
- 2.46.1-1
- 2.46.2-1
- 2.46.3-1
- 2.46.4-1
- 2.46.5-1
- 2.46.6-1
- 2.48.0-1
- 2.48.1-1
- 2.48.1-2
- 2.48.2-1
- 2.48.3-1
- 2.48.5-1
- 2.48.6-1
- 2.48.6-2
- 2.50.0-1
- 2.50.0-2
- 2.50.1-1
- 2.50.2-1
- 2.50.3-1
- 2.50.4-1
- 2.50.5-1
- 2.50.6-1
- 2.52.0-1
- 2.52.1-1
- 2.52.2-1
- 2.52.2-2
- 2.52.3-1
- 2.52.4-1
- 2.52.5-1
- 2.52.6-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
wpewebkit Debian:13
- Affected ranges
- ECOSYSTEM: < 2.48.0-1
Update to 2.48.0-1
wpewebkit Debian:14
- Affected ranges
- ECOSYSTEM: < 2.48.0-1
Update to 2.48.0-1
qtwebkit-opensource-src Ubuntu:16.04:LTS
- Versions
- 5.4.2+dfsg-1ubuntu2.1
- 5.5.1+dfsg-2ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
webkit2gtk Ubuntu:16.04:LTS
- Versions
- 2.8.5+dfsg1-3
- 2.10.3+dfsg1-1
- 2.10.4+dfsg1-1
- 2.10.5-1
- 2.10.6-1
- 2.10.6-1ubuntu1
- 2.10.8-1ubuntu1
- 2.10.9-1ubuntu1
- 2.12.5-0ubuntu0.16.04.1
- 2.14.2-0ubuntu0.16.04.1
- 2.14.3-0ubuntu0.16.04.1
- 2.14.5-0ubuntu0.16.04.1
- 2.16.1-0ubuntu0.16.04.1
- 2.16.1-0ubuntu0.16.04.2
- 2.16.2-0ubuntu0.16.04.1
- 2.16.3-0ubuntu0.16.04.1
- 2.16.6-0ubuntu0.16.04.1
- 2.18.0-0ubuntu0.16.04.2
- 2.18.3-0ubuntu0.16.04.1
- 2.18.4-0ubuntu0.16.04.1
- 2.18.5-0ubuntu0.16.04.1
- 2.18.6-0ubuntu0.16.04.1
- 2.20.1-0ubuntu0.16.04.1
- 2.20.2-0ubuntu0.16.04.1
- 2.20.3-0ubuntu0.16.04.1
- 2.20.5-0ubuntu0.16.04.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtwebkit-source Ubuntu:16.04:LTS
- Versions
- 2.3.2-0ubuntu10
- 2.3.2-0ubuntu11
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
webkitgtk Ubuntu:16.04:LTS
- Versions
- 2.4.9-2ubuntu2
- 2.4.10-0ubuntu1
- 2.4.11-0ubuntu0.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
webkit2gtk Ubuntu:18.04:LTS
- Versions
- 2.18.0-2
- 2.18.0-2build1
- 2.18.2-1
- 2.18.3-1
- 2.18.4-1
- 2.18.6-1
- 2.19.91-1ubuntu1
- 2.19.92-1
- 2.20.0-1
- 2.20.0-2
- 2.20.0-2ubuntu1
- 2.20.1-1
- 2.20.2-0ubuntu0.18.04.1
- 2.20.3-0ubuntu0.18.04.1
- 2.20.5-0ubuntu0.18.04.1
- 2.22.2-0ubuntu0.18.04.1
- 2.22.2-0ubuntu0.18.04.2
- 2.22.4-0ubuntu0.18.04.1
- 2.22.5-0ubuntu0.18.04.1
- 2.22.6-0ubuntu0.18.04.1
- 2.24.1-0ubuntu0.18.04.1
- 2.24.2-0ubuntu0.18.04.1
- 2.24.4-0ubuntu0.18.04.1
- 2.26.1-0ubuntu0.18.04.1
- 2.26.2-0ubuntu0.18.04.1
- 2.26.3-0ubuntu0.18.04.1
- 2.26.4-0ubuntu0.18.04.1
- 2.28.0-0ubuntu0.18.04.3
- 2.28.1-0ubuntu0.18.04.1
- 2.28.2-0ubuntu0.18.04.1
- 2.28.3-0ubuntu0.18.04.1
- 2.28.4-0ubuntu0.18.04.1
- 2.30.3-0ubuntu0.18.04.1
- 2.30.5-0ubuntu0.18.04.1
- 2.30.6-0ubuntu0.18.04.1
- 2.32.0-0ubuntu0.18.04.1
- 2.32.3-0ubuntu0.18.04.1
- 2.32.4-0ubuntu0.18.04.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtwebkit-opensource-src Ubuntu:18.04:LTS
- Versions
- 5.9.1+dfsg-5ubuntu1
- 5.9.1+dfsg-5ubuntu3
- 5.212.0~alpha2-5build2
- 5.212.0~alpha2-5build4
- 5.212.0~alpha2-7
- 5.212.0~alpha2-7build2
- 5.212.0~alpha2-7ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtwebkit-source Ubuntu:18.04:LTS
- Versions
- 2.3.2-0ubuntu13
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
webkitgtk Ubuntu:18.04:LTS
- Versions
- 2.4.11-3
- 2.4.11-3ubuntu2
- 2.4.11-3ubuntu3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
webkit2gtk Ubuntu:20.04:LTS
- Versions
- 2.26.1-3
- 2.26.2-1
- 2.26.3-1ubuntu2
- 2.26.4-1ubuntu1
- 2.28.0-1ubuntu2
- 2.28.1-1
- 2.28.2-0ubuntu0.20.04.1
- 2.28.3-0ubuntu0.20.04.1
- 2.28.4-0ubuntu0.20.04.1
- 2.30.3-0ubuntu0.20.04.1
- 2.30.5-0ubuntu0.20.04.1
- 2.30.6-0ubuntu0.20.04.1
- 2.32.0-0ubuntu0.20.04.1
- 2.32.3-0ubuntu0.20.04.1
- 2.32.4-0ubuntu0.20.04.1
- 2.34.1-0ubuntu0.20.04.1
- 2.34.3-0ubuntu0.20.04.1
- 2.34.4-0ubuntu0.20.04.1
- 2.34.6-0ubuntu0.20.04.1
- 2.36.0-0ubuntu0.20.04.3
- 2.36.2-0ubuntu0.20.04.1
- 2.36.3-0ubuntu0.20.04.1
- 2.36.4-0ubuntu0.20.04.1
- 2.36.6-0ubuntu0.20.04.1
- 2.36.7-0ubuntu0.20.04.1
- 2.36.8-0ubuntu0.20.04.1
- 2.38.2-0ubuntu0.20.04.1
- 2.38.3-0ubuntu0.20.04.1
- 2.38.4-0ubuntu0.20.04.2
- 2.38.5-0ubuntu0.20.04.1
- 2.38.6-0ubuntu0.20.04.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtwebkit-opensource-src Ubuntu:20.04:LTS
- Versions
- 5.212.0~alpha3-3
- 5.212.0~alpha3-5
- 5.212.0~alpha3-6
- 5.212.0~alpha3-7
- 5.212.0~alpha4-1
- 5.212.0~alpha4-1ubuntu1
- 5.212.0~alpha4-1ubuntu2
- 5.212.0~alpha4-1ubuntu2.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
wpewebkit Ubuntu:20.04:LTS
- Versions
- 2.26.3-1
- 2.26.4-1
- 2.26.4-1build1
- 2.28.0-1
- 2.28.1-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- https://support.apple.com/en-us/122281
- https://support.apple.com/en-us/122283
- https://support.apple.com/en-us/122284
- https://support.apple.com/en-us/122285
- https://support.apple.com/en-us/122345
- https://support.apple.com/en-us/122346
- https://support.apple.com/en-us/122372
- https://support.apple.com/en-us/122376
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24201
- http://seclists.org/fulldisclosure/2025/Mar/2
- http://seclists.org/fulldisclosure/2025/Mar/3
- http://seclists.org/fulldisclosure/2025/Mar/4
- http://seclists.org/fulldisclosure/2025/Mar/5
- http://seclists.org/fulldisclosure/2025/Apr/16
- http://seclists.org/fulldisclosure/2025/Oct/31
- http://seclists.org/fulldisclosure/2025/Oct/1
- https://lists.debian.org/debian-lts-announce/2025/06/msg00016.html
- http://seclists.org/fulldisclosure/2025/Jun/19
- http://seclists.org/fulldisclosure/2025/Apr/7
- https://github.com/JGoyd/Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201
- https://github.com/cisagov/vulnrichment/issues/194
- https://nvd.nist.gov/vuln/detail/CVE-2025-24201