VDB
DEBIAN-CVE-2025-31205
DEBIAN-CVE-2025-31205
PUBLISHED
CVSS 6.5 MEDIUM
The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. A malicious website may exfiltrate data cross-origin.
Risk Scores
CVSS v3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:14 | webkit2gtk | 0, 0 |
| Debian:13 | webkit2gtk | 0, 0 |
| Debian:12 | webkit2gtk | *, 2.44.2-1, 2.48.3-1 |
| Debian:11 | wpewebkit | 2.38.3-1, 2.32.3-2, 2.32.4-1 |
| Debian:12 | wpewebkit | 2.40.0-1, 2.39.91-1, 0 |
| Debian:14 | wpewebkit | 0, 0 |
| Debian:11 | webkit2gtk | 2.36.0-3, 2.36.1-1, 2.36.2-1 |
| Debian:13 | wpewebkit | 0, 0 |
Timeline
- May 12, 2025 CVE Published
- Apr 28, 2026 CVE Updated