CVE-2025-24188 — Improper Check or Handling of Exceptional Conditions in Apple Macos

CWE-703 — Improper Check or Handling of Exceptional Conditions5 documents4 sources

Severity

6.5MEDIUMNVD

EPSS

0.1%

top 65.01%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Apple Macos Apple Safari

Timeline

PublishedJul 30

Description

A logic issue was addressed with improved checks. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages4 packages

▶CVEListV5apple/safari< 18.6

▶NVDapple/safari< 18.6

▶CVEListV5apple/macos< 15.6

▶NVDapple/macos< 15.6

🔴Vulnerability Details

GHSA

GHSA-mmfc-2fhm-4p24: A logic issue was addressed with improved checks↗2025-07-30

▶

CVEList

CVE-2025-24188: A logic issue was addressed with improved checks↗2025-07-29

▶

📋Vendor Advisories

Apple

CVE-2025-24188: Safari 18.6↗2025-07-30

▶

Apple

CVE-2025-24188: macOS Sequoia 15.6↗2025-07-29

▶