Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-24201

Опубликовано: 11 мар. 2025
Источник: nvd
CVSS3: 8.8
CVSS3: 7.1
EPSS Низкий

Описание

An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in visionOS 2.3.2, iOS 18.3.2 and iPadOS 18.3.2, macOS Sequoia 15.3.2, Safari 18.3.1, watchOS 11.4, iPadOS 17.7.6, iOS 16.7.11 and iPadOS 16.7.11, iOS 15.8.4 and iPadOS 15.8.4. Maliciously crafted web content may be able to break out of Web Content sandbox. This is a supplementary fix for an attack that was blocked in iOS 17.2. (Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.).

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
Версия до 18.3.1 (исключая)
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
Версия до 18.3.2 (исключая)
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Версия до 18.3.2 (исключая)
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Версия до 15.3.2 (исключая)
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
Версия до 2.3.2 (исключая)
cpe:2.3:o:apple:watchos:11.4:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
Версия от 15.8 (включая) до 15.8.4 (исключая)
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
Версия от 16.7 (включая) до 16.7.11 (исключая)
Конфигурация 3

Одно из

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Версия от 15.8 (включая) до 15.8.4 (исключая)
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Версия от 16.7 (включая) до 16.7.11 (исключая)

EPSS

Процентиль: 29%
0.00103
Низкий

8.8 High

CVSS3

7.1 High

CVSS3

Дефекты

CWE-787
CWE-787

Связанные уязвимости

CVSS3: 8.8
ubuntu
3 месяца назад

An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in visionOS 2.3.2, iOS 18.3.2 and iPadOS 18.3.2, macOS Sequoia 15.3.2, Safari 18.3.1, watchOS 11.4, iPadOS 17.7.6, iOS 16.7.11 and iPadOS 16.7.11, iOS 15.8.4 and iPadOS 15.8.4. Maliciously crafted web content may be able to break out of Web Content sandbox. This is a supplementary fix for an attack that was blocked in iOS 17.2. (Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.).

CVSS3: 7.5
redhat
3 месяца назад

An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in visionOS 2.3.2, iOS 18.3.2 and iPadOS 18.3.2, macOS Sequoia 15.3.2, Safari 18.3.1, watchOS 11.4, iPadOS 17.7.6, iOS 16.7.11 and iPadOS 16.7.11, iOS 15.8.4 and iPadOS 15.8.4. Maliciously crafted web content may be able to break out of Web Content sandbox. This is a supplementary fix for an attack that was blocked in iOS 17.2. (Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.).

msrc
3 месяца назад

Chromium: CVE-2025-24201 Out of bounds write in GPU on Mac

CVSS3: 8.8
debian
3 месяца назад

An out-of-bounds write issue was addressed with improved checks to pre ...

suse-cvrf
3 месяца назад

Security update for webkit2gtk3

EPSS

Процентиль: 29%
0.00103
Низкий

8.8 High

CVSS3

7.1 High

CVSS3

Дефекты

CWE-787
CWE-787