CVE-2025-31277
published 2025-07-30CVE-2025-31277: The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS…
high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
KEV
CISA Known Exploited Vulnerabilitydue 2026-04-03
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios_18.6_and_ipados | — | — |
| apple | ios_and_ipados | < 18.6 | 18.6 |
| apple | ipados | < 18.6 | 18.6 |
| apple | iphone_os | < 18.6 | 18.6 |
| apple | macos | < 15.6 | 15.6 |
| apple | macos | >= 15.0 < 15.6 | 15.6 |
| apple | macos_sequoia | — | — |
| apple | safari | < 18.6 | 18.6 |
| apple | safari | — | — |
| apple | tvos | < 18.6 | 18.6 |
| apple | tvos | — | — |
| apple | visionos | < 2.6 | 2.6 |
| apple | visionos | — | — |
| apple | watchos | < 11.6 | 11.6 |
| apple | watchos | — | — |
| debian | webkit2gtk | < webkit2gtk 2.50.1-1~deb12u1 (bookworm) | webkit2gtk 2.50.1-1~deb12u1 (bookworm) |
| debian | wpewebkit | < webkit2gtk 2.50.1-1~deb12u1 (bookworm) | webkit2gtk 2.50.1-1~deb12u1 (bookworm) |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv8.8HIGH
vulncheck8.8HIGH
cisa8.8HIGH