Recently modified exploited zeroday vulnerabilities for "apple safari"

Where

AND

Sort:

Apple SafariUse After Free, Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Race Condition

Risk 65

Severity

4.3

Exploited

Zeroday

EPSS

0.04%

Use After Free, Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Race Condition

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected Safari crash.

1 / 159

Source: MITRE

First published (updated )

CVE-2025-30427

Apple SafariInput Validation, Null Pointer Dereference, Use After Free

Risk 72

Severity

8.1

Exploited

Zeroday

Input Validation, Null Pointer Dereference, Use After Free

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Accessibility. A logging issue was addressed with improved data redaction.

1 / 21

Source: Apple

First published (updated )

CVE-2025-24180

Apple visionOSApple Multiple Products WebKit Out-of-Bounds Write Vulnerability

Risk 100

Severity

Exploited

Zeroday

Input Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Accessibility. An authorization issue was addressed with improved state management.

1 / 67

Source: Apple

First published (updated )

CVE-2025-24201

Apple SafariDouble Free, Use After Free, Input Validation, Integer Overflow, Null Pointer Dereference, Buffer Overflow, Race Condition

Risk 91

Severity

7.8

Exploited

Zeroday

Double Free, Use After Free, Input Validation, Integer Overflow, Null Pointer Dereference, Buffer Overflow, Race Condition

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 189

Source: Apple

First published (updated )

CVE-2025-24213

debian/webkit2gtkApple Multiple Products WebKit Type Confusion Vulnerability

Risk 83

Severity

8.8

Exploited

Zeroday

EPSS

0.11%

Use After Free

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved checks. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited.

Reference: https://webkitgtk.org/security/WSA-2024-0001.html

1 / 7

Source: Red Hat

First published (updated )

CVE-2024-23222