CVE-2025-43212

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, macOS Sequoia 15.6, iOS 18.6 and iPadOS 18.6, tvOS 18.6, watchOS 11.6, visionOS 2.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://support.apple.com/en-us/124147	Release Notes Vendor Advisory
https://support.apple.com/en-us/124149	Release Notes Vendor Advisory
https://support.apple.com/en-us/124152	Release Notes Vendor Advisory
https://support.apple.com/en-us/124153	Release Notes Vendor Advisory
https://support.apple.com/en-us/124154	Release Notes Vendor Advisory
https://support.apple.com/en-us/124155	Release Notes Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:apple:safari::::::::
	cpe:2.3:o:apple:ipados::::::::
	cpe:2.3:o:apple:iphone_os::::::::
	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:tvos::::::::
	cpe:2.3:o:apple:visionos::::::::
	cpe:2.3:o:apple:watchos::::::::

History

31 Jul 2025, 21:09

Type	Values Removed	Values Added
References	~~() https://support.apple.com/en-us/124147 -~~	() https://support.apple.com/en-us/124147 - Release Notes, Vendor Advisory
References	~~() https://support.apple.com/en-us/124149 -~~	() https://support.apple.com/en-us/124149 - Release Notes, Vendor Advisory
References	~~() https://support.apple.com/en-us/124152 -~~	() https://support.apple.com/en-us/124152 - Release Notes, Vendor Advisory
References	~~() https://support.apple.com/en-us/124153 -~~	() https://support.apple.com/en-us/124153 - Release Notes, Vendor Advisory
References	~~() https://support.apple.com/en-us/124154 -~~	() https://support.apple.com/en-us/124154 - Release Notes, Vendor Advisory
References	~~() https://support.apple.com/en-us/124155 -~~	() https://support.apple.com/en-us/124155 - Release Notes, Vendor Advisory
CPE		cpe:2.3:o:apple:iphone_os:::::::: cpe:2.3:o:apple:tvos:::::::: cpe:2.3:a:apple:safari:::::::: cpe:2.3:o:apple:watchos:::::::: cpe:2.3:o:apple:ipados:::::::: cpe:2.3:o:apple:macos:::::::: cpe:2.3:o:apple:visionos::::::::
First Time		Apple watchos Apple Apple tvos Apple ipados Apple safari Apple macos Apple iphone Os Apple visionos

30 Jul 2025, 23:15

Type	Values Removed	Values Added
Summary	(en) The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6, iOS 18.6 and iPadOS 18.6, tvOS 18.6, watchOS 11.6, visionOS 2.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.	(en) The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, macOS Sequoia 15.6, iOS 18.6 and iPadOS 18.6, tvOS 18.6, watchOS 11.6, visionOS 2.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
References		() https://support.apple.com/en-us/124152 -

30 Jul 2025, 18:15

Type	Values Removed	Values Added
CWE		CWE-119
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 6.5
Summary		(es) El problema se solucionó mejorando la gestión de la memoria. Este problema está corregido en macOS Sequoia 15.6, iOS 18.6 y iPadOS 18.6, tvOS 18.6, watchOS 11.6 y visionOS 2.6. El procesamiento de contenido web manipulado con fines malintencionados puede provocar un bloqueo inesperado de Safari.

30 Jul 2025, 00:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-07-30 00:15

Updated : 2025-07-31 21:09

NVD link : CVE-2025-43212

Mitre link : CVE-2025-43212

CVE.ORG link : CVE-2025-43212

JSON object : View

Products Affected

apple

safari
visionos
iphone_os
watchos
macos
ipados
tvos

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

6.5 /10