Advisories · Technology

Apple Safari.

Every CVE that names Apple Safari among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-43368 CVE record

CVSS 4.3 Medium

Use after free in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 15 Sept 2025
CVE-2025-43343 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 15 Sept 2025
CVE-2025-43342 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper input validation in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-20
Not analysed yet 15 Sept 2025
CVE-2025-43272 CVE record

CVSS 6.5 Medium

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 15 Sept 2025
CVE-2025-43356 CVE record

CVSS 6.5 Medium

Information disclosure in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 15 Sept 2025
CVE-2025-31254 CVE record

CVSS 5.4 Medium

Incorrect authorization in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 15 Sept 2025
CVE-2025-43327 CVE record

CVSS 6.5 Medium

The issue was addressed by adding additional logic.
- Apple Safari
- Apple macOS
- CWE-451
Not analysed yet 15 Sept 2025
CVE-2025-43265 CVE record

CVSS 4.0 Medium

Out-of-bounds read in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 29 Jul 2025
CVE-2025-24188 CVE record

CVSS 6.5 Medium

A logic issue was addressed with improved checks.
- Apple Safari
- Apple macOS
- CWE-703
Not analysed yet 29 Jul 2025
CVE-2025-43216 CVE record

CVSS 6.5 Medium

Use after free in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 29 Jul 2025
CVE-2025-43227 CVE record

CVSS 7.5 High

Exposure of personal information in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 29 Jul 2025
CVE-2025-43211 CVE record

CVSS 6.2 Medium

Resource allocation without limits in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Denial of service
Not analysed yet 29 Jul 2025
CVE-2025-43212 CVE record

CVSS 6.5 Medium

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 29 Jul 2025
CVE-2025-43228 CVE record

CVSS 4.3 Medium

The issue was addressed with improved UI.
- Apple Safari
- Apple iOS and iPadOS
- CWE-451
Not analysed yet 29 Jul 2025
CVE-2025-43214 CVE record

CVSS 6.5 Medium

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 29 Jul 2025
CVE-2025-31278 CVE record

CVSS 8.8 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 29 Jul 2025
CVE-2025-31277 CVE record

CVSS 8.8 HighCritical · KEVKEV

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 29 Jul 2025
CVE-2025-43240 CVE record

CVSS 6.2 Medium

A logic issue was addressed with improved checks.
- Apple Safari
- Apple macOS
- CWE-703
Not analysed yet 29 Jul 2025
CVE-2025-31273 CVE record

CVSS 8.8 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 29 Jul 2025
CVE-2025-43229 CVE record

CVSS 6.1 Medium

Cross-site scripting in Apple Safari and others
- Apple Safari
- Apple macOS
- Cross-site scripting (XSS)
Not analysed yet 29 Jul 2025
CVE-2025-43213 CVE record

CVSS 6.5 Medium

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 29 Jul 2025
CVE-2025-30466 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Origin validation error in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-346
Not analysed yet 29 May 2025
CVE-2025-24189 CVE record

CVSS 8.8 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 19 May 2025
CVE-2025-24223 CVE record

CVSS 8.0 High

Cross-site request forgery in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Cross-site request forgery (CSRF)
Not analysed yet 12 May 2025
CVE-2025-31257 CVE record

CVSS 4.7 Medium

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 12 May 2025
CVE-2025-31217 CVE record

CVSS 6.5 Medium

Improper input validation in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-20
Not analysed yet 12 May 2025
CVE-2025-31206 CVE record

CVSS 4.3 Medium

Type confusion in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 12 May 2025
CVE-2025-31204 CVE record

CVSS 8.8 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 12 May 2025
CVE-2025-31205 CVE record

CVSS 6.5 Medium

Cross-site request forgery in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Cross-site request forgery (CSRF)
Not analysed yet 12 May 2025
CVE-2025-31238 CVE record

CVSS 7.3 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 12 May 2025
CVE-2025-31215 CVE record

CVSS 6.5 Medium

Improper input validation in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-20
Not analysed yet 12 May 2025
CVE-2025-31223 CVE record

CVSS 8.0 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 12 May 2025
CVE-2023-42970 CVE record

CVSS 8.8 High

Use after free in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 11 Apr 2025
CVE-2023-42875 CVE record

CVSS 7.3 High

Code injection in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Code injection
Not analysed yet 11 Apr 2025
CVE-2025-24167 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

This issue was addressed through improved state management.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 31 Mar 2025
CVE-2025-30427 CVE record

CVSS 4.3 Medium

Use after free in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 31 Mar 2025
CVE-2025-24192 CVE record

CVSS 6.5 Medium

A script imports issue was addressed with improved isolation.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 31 Mar 2025
CVE-2025-30467 CVE record

CVSS 4.3 Medium

The issue was addressed with improved checks.
- Apple Safari
- Apple iOS and iPadOS
- CWE-451
Not analysed yet 31 Mar 2025
CVE-2025-24213 CVE record

CVSS 7.8 High

Type confusion in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 31 Mar 2025
CVE-2025-24209 CVE record

CVSS 7.0 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 31 Mar 2025
CVE-2025-24264 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Uncontrolled resource consumption in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Denial of service
Not analysed yet 31 Mar 2025
CVE-2025-24208 CVE record

CVSS 6.1 Medium

Cross-site scripting in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Cross-site scripting (XSS)
Not analysed yet 31 Mar 2025
CVE-2025-24180 CVE record

CVSS 8.1 High

Open redirect in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Open redirect
Not analysed yet 31 Mar 2025
CVE-2025-30425 CVE record

CVSS 4.3 Medium

Improper access control in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 31 Mar 2025
CVE-2025-24216 CVE record

CVSS 4.3 Medium

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
- CWE-508
Not analysed yet 31 Mar 2025
CVE-2025-31184 CVE record

CVSS 7.8 High

This issue was addressed with improved permissions checking.
- Apple Safari
- Apple iOS and iPadOS
- CWE-281
Not analysed yet 31 Mar 2025
CVE-2025-31192 CVE record

CVSS 6.7 Medium

The issue was addressed with improved checks.
- Apple Safari
- Apple iOS and iPadOS
- CWE-305
Not analysed yet 31 Mar 2025
CVE-2024-54551 CVE record

CVSS 7.5 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 20 Mar 2025
CVE-2025-24201 CVE record

CVSS 10.0 CriticalCritical · KEV, CVSS 9+KEV

Out-of-bounds write in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2024-54467 CVE record

CVSS 6.5 Medium

Information disclosure in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 10 Mar 2025
CVE-2024-44192 CVE record

CVSS 6.5 Medium

Uncontrolled resource consumption in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Denial of service
Not analysed yet 10 Mar 2025
CVE-2024-54658 CVE record

CVSS 6.5 Medium

Uncontrolled resource consumption in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Denial of service
Not analysed yet 10 Feb 2025
CVE-2024-54542 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Missing authorization in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 27 Jan 2025
CVE-2025-24150 CVE record

CVSS 8.8 High

Command injection in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Command injection
Not analysed yet 27 Jan 2025
CVE-2024-54543 CVE record

CVSS 8.8 High

Out-of-bounds write in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 27 Jan 2025
CVE-2025-24143 CVE record

CVSS 6.5 Medium

Missing authorization in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 27 Jan 2025
CVE-2025-24162 CVE record

CVSS 6.5 Medium

Out-of-bounds read in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 27 Jan 2025
CVE-2025-24158 CVE record

CVSS 6.5 Medium

Cross-site scripting in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Cross-site scripting (XSS)
Not analysed yet 27 Jan 2025
CVE-2025-24128 CVE record

CVSS 4.3 Medium

The issue was addressed by adding additional logic.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 27 Jan 2025
CVE-2025-24169 CVE record

CVSS 7.5 High

Sensitive information in log files in Apple Safari and others
- Apple Safari
- Apple macOS
- Information disclosure
Not analysed yet 27 Jan 2025