CVE-2025-24201

CVSS 10 CRITICALEPSS 4.2%● KEVCWE-787

Vexday Risk Score

78High priority

SSVC decision (CISA)

Act

Exploitation + impact → act immediately

CVSS 10EPSS 4.2%KEV simPoC públicaNuclei —Metasploit —Patch —

Lifecycle

11 Mar 2025Published on NVD

13 Mar 2025Active exploitation (CISA KEV)

11 Jul 2025Public PoC

Recommendation: Patch as soon as possible — active exploitation confirmed.

In short

A memory writing flaw in Safari and Apple operating systems allows malicious websites to escape the security sandbox that normally isolates web content, potentially giving attackers full control of your device.

Technical detail

An out-of-bounds write vulnerability (CWE-787) in WebKit's rendering engine enables sandbox escape when processing maliciously crafted web content. The vulnerability affects multiple Apple platforms and requires user interaction (visiting a malicious website); successful exploitation bypasses Web Content sandbox restrictions and grants arbitrary code execution with system privileges.

Summary generated and translated by AI from the official description.

An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.2 and iPadOS 18.3.2, iPadOS 17.7.6, macOS Sequoia 15.3.2, visionOS 2.3.2, watchOS 11.4. Maliciously crafted web content may be able to break out of Web Content sandbox. This is a supplementary fix for an attack that was blocked in iOS 17.2. (Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.).

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected products

Apple · iOS and iPadOS Apple · iPadOS Apple · macOS Apple · Safari Apple · visionOS Apple · watchOS

public PoCs found — 2

githubgithub.com/The-Maxu/CVE-2025-24201-WebKit-Vulnerability-Detector-PoC-★ 6 githubgithub.com/5ky9uy/glass-cage-i18-2025-24085-and-cve-2025-24201★ 5

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References