CVE-2025-24201
Act now ● On CISA KEV — actively exploited
Actively exploited — on the CISA KEV list.
CVSS base
—
EPSS — probability of exploitation (30 days)
3.8%
89.5th percentile
CISA KEV
Listed
Added 2025-03-13 · patch by 2025-04-03
Weakness / dates
—
Published — · modified —
Timeline
- 2025-03-13 — Added to CISA KEV (actively exploited)
- 2025-04-03 — CISA patch-by deadline
Description
Apple iOS, iPadOS, macOS, and other Apple products contain an out-of-bounds write vulnerability in WebKit that may allow maliciously crafted web content to break out of Web Content sandbox. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.