ZDI-25-303: Apple Safari SandboxBroker ZIP File Processing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 4.3. The following CVEs are assigned: CVE-2025-24222.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-25-303?
The ZDI-25-303 vulnerability is considered to have a moderate severity level due to its potential to disclose sensitive information.
How do I fix ZDI-25-303?
To fix the ZDI-25-303 vulnerability, update your Apple Safari to the latest version provided by Apple.
What type of user interaction is required for ZDI-25-303?
Exploitation of the ZDI-25-303 vulnerability requires the user to visit a malicious webpage or open a malicious file.
Which software is affected by ZDI-25-303?
ZDI-25-303 affects Apple Safari installations.
What kind of attacks can ZDI-25-303 be leveraged for?
ZDI-25-303 can be exploited by attackers to disclose sensitive information from affected systems.