CVE-2025-24188

6.5 mediumEPSS 0.6%

Medium (6.5) in apple. EPSS 0.6% chance of exploitation in the next 30 days.

A logic issue was addressed with improved checks. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 48% of CVEs (scores of 2026-10-31)
CWE: CWE-703
Published: 2025-07-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apple:macos
apple:safari

References

https://support.apple.com/en-us/124149
https://support.apple.com/en-us/124152
http://seclists.org/fulldisclosure/2025/Aug/0
http://seclists.org/fulldisclosure/2025/Jul/32

Check your stack JSON