CVE-2025-43213

Highest-risk unexploited with PoCs

Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS

Actively Exploited

Confirmed exploited in the wild, sorted by most recently updated

CVSS 6.5EPSS <1%

Published 2025-07-29Updated 2025-07-31

Media 8320

Vulnerability details

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CNAapple

EPSS score history

Sources

4 links

PoC links are not available for guest users. Login to view them.

CVEShield RedHat Vuln DB NVD Analysis CVE Organization

Profile

CVSS

6.5

EPSS

<1%

Published

2025-07-29

Updated

2025-07-31

CNA

apple

Vendors

Apple

5 products

CPEs

cpe:/o:redhat:rhel_els:7

cpe:/a:redhat:enterprise_linux:8::appstream

cpe:/a:redhat:rhel_aus:8.4::appstream

cpe:/a:redhat:rhel_eus_long_life:8.4::appstream

cpe:/a:redhat:rhel_aus:8.6::appstream

cpe:/a:redhat:rhel_e4s:8.6::appstream

cpe:/a:redhat:rhel_tus:8.6::appstream

cpe:/a:redhat:rhel_e4s:8.8::appstream

cpe:/a:redhat:rhel_tus:8.8::appstream

cpe:/a:redhat:rhel_e4s:9.0::appstream

cpe:/a:redhat:rhel_e4s:9.2::appstream

cpe:/a:redhat:rhel_eus:9.4::appstream

cpe:/a:redhat:rhel_eus:9.6::appstream

cpe:/a:redhat:enterprise_linux:9::appstream

cpe:/o:redhat:enterprise_linux:6

cpe:/o:redhat:enterprise_linux:7

cpe:/a:redhat:enterprise_linux:8

cpe:/a:redhat:rhel_aus:8.4

cpe:/a:redhat:rhel_eus_long_life:8.4

cpe:/a:redhat:rhel_aus:8.6

cpe:/a:redhat:rhel_tus:8.6

cpe:/a:redhat:rhel_e4s:8.6

cpe:/a:redhat:rhel_tus:8.8

cpe:/a:redhat:rhel_e4s:8.8

cpe:/a:redhat:enterprise_linux:9

cpe:/a:redhat:rhel_e4s:9.0

cpe:/a:redhat:rhel_e4s:9.2

cpe:/a:redhat:rhel_eus:9.4

cpe:/a:redhat:rhel_eus:9.6

Vulnerability dashboard

Highest-risk unexploited with PoCs

Actively Exploited

Recently Updated