Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2025-43529

Опубликовано: 17 дек. 2025
Источник: ubuntu
Приоритет: high
EPSS Низкий
CVSS3: 8.8

Описание

A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 26.2, Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2, tvOS 26.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26. CVE-2025-14174 was also issued in response to this report.

РелизСтатусПримечание
devel

DNE

esm-apps/bionic

ignored

esm-apps/focal

ignored

esm-apps/jammy

ignored

esm-apps/noble

ignored

esm-infra/xenial

ignored

jammy

ignored

noble

ignored

plucky

DNE

questing

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/bionic

ignored

esm-apps/xenial

ignored

jammy

DNE

noble

DNE

plucky

DNE

questing

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

released

2.50.4-1ubuntu1
esm-infra/bionic

ignored

esm-infra/focal

ignored

esm-infra/xenial

ignored

jammy

released

2.50.4-0ubuntu0.22.04.1
noble

released

2.50.4-0ubuntu0.24.04.1
plucky

released

2.50.4-0ubuntu0.25.04.1
questing

released

2.50.4-0ubuntu0.25.10.1
upstream

released

2.50.4

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/bionic

ignored

esm-apps/xenial

ignored

jammy

DNE

noble

DNE

plucky

DNE

questing

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/focal

ignored

esm-apps/jammy

ignored

jammy

ignored

noble

DNE

plucky

DNE

questing

DNE

upstream

needs-triage

Показывать по

EPSS

Процентиль: 4%
0.00018
Низкий

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
nvd
около 2 месяцев назад

A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 26.2, Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2, tvOS 26.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26. CVE-2025-14174 was also issued in response to this report.

CVSS3: 8.8
debian
около 2 месяцев назад

A use-after-free issue was addressed with improved memory management. ...

CVSS3: 8.8
github
около 2 месяцев назад

A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 26.2, Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2, tvOS 26.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26. CVE-2025-14174 was also issued in response to this report.

CVSS3: 8.8
fstec
около 2 месяцев назад

Уязвимость модуля отображения веб-страниц WebKit браузера Safari операционных систем tvOS, iOS, iPadOS, watchOS, macOS и visionOS, позволяющая нарушителю выполнить произвольный код и получить полный контроль над устройством

rocky
около 2 месяцев назад

Important: webkit2gtk3 security update

EPSS

Процентиль: 4%
0.00018
Низкий

8.8 High

CVSS3