VDB

CISA-2025-43265

CISA-2025-43265 PUBLISHED CVSS 4 MEDIUM

Reported by apple · Published July 29, 2025

An out-of-bounds read was addressed with improved input validation. This issue is fixed in Safari 18.6, watchOS 11.6, visionOS 2.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6. Processing maliciously crafted web content may disclose internal states of the app.

Risk Scores

CVSS 3.1
4
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected Products

VendorProductVersions
AppleSafariunspecified
ApplemacOSunspecified
AppletvOSunspecified
ApplevisionOSunspecified
ApplewatchOSunspecified
AppleiOS and iPadOSunspecified
AppletvOSunspecified, unspecified
AppleSafariunspecified, *
AppleiOS and iPadOS*, unspecified
ApplevisionOSunspecified, unspecified
ApplewatchOSunspecified, unspecified
ApplemacOSunspecified, unspecified

Timeline

  • Jul 29, 2025 CVE Published
  • Nov 4, 2025 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›