VDB
GHSA-7jj7-mxgf-79rv
GHSA-7jj7-mxgf-79rv
PUBLISHED
CVSS 9.800000190734863 CRITICAL
Record from GitHub Advisory Database · Published January 28, 2025
This issue was addressed through improved state management. This issue is fixed in visionOS 2.3, Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. Processing maliciously crafted web content may lead to an unexpected process crash.
Risk scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Timeline
- Jan 28, 2025 CVE Published
- Apr 10, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-7jj7-mxgf-79rv
vulnetix vdb fixes GHSA-7jj7-mxgf-79rv
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-7jj7-mxgf-79rv/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://lists.debian.org/debian-lts-announce/2025/02/msg00014.html url
- https://support.apple.com/en-us/122066 url
- https://support.apple.com/en-us/122068 url
- https://support.apple.com/en-us/122071 url
- https://support.apple.com/en-us/122073 url
- https://support.apple.com/en-us/122074 url
- http://seclists.org/fulldisclosure/2025/Jan/13 url
- http://seclists.org/fulldisclosure/2025/Jan/15 url
- http://seclists.org/fulldisclosure/2025/Jan/18 url
- http://seclists.org/fulldisclosure/2025/Jan/20 url
- https://nvd.nist.gov/vuln/detail/CVE-2025-24162 advisory
- https://support.apple.com/en-us/122072 url