Vulnerability-Lookup

CVE-2025-31223 (GCVE-0-2025-31223)

Vulnerability from cvelistv5 – Published: 2025-05-12 21:42 – Updated: 2026-07-01 12:05

Summary

The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to memory corruption.

Severity

8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

Processing maliciously crafted web content may lead to memory corruption
CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Assigner

apple

References

24 references

URL	Tags
https://support.apple.com/en-us/122404
https://support.apple.com/en-us/122716
https://support.apple.com/en-us/122719
https://support.apple.com/en-us/122720
https://support.apple.com/en-us/122721
https://support.apple.com/en-us/122722
http://seclists.org/fulldisclosure/2025/May/13
http://seclists.org/fulldisclosure/2025/May/12
http://seclists.org/fulldisclosure/2025/May/10
http://seclists.org/fulldisclosure/2025/May/7
http://seclists.org/fulldisclosure/2025/May/5
https://access.redhat.com/security/cve/CVE-2025-31223	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2448779	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2025:19352	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:17802	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:19157	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:19165	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:19109	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:17807	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:17643	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:17743	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:17741	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:18097	vendor-advisoryx_refsource_REDHAT

Impacted products

23 products

Vendor	Product	Version
Apple	Safari	Affected: 0 , < 18.5 (custom)
Apple	iOS and iPadOS	Affected: 0 , < 18.5 (custom)
Apple	macOS	Affected: 0 , < 15.5 (custom)
Apple	tvOS	Affected: 0 , < 18.5 (custom)
Apple	visionOS	Affected: 0 , < 2.5 (custom)
Apple	watchOS	Affected: 0 , < 11.5 (custom)
Red Hat	Red Hat Enterprise Linux Server (v. 7 ELS)	cpe:/o:redhat:rhel_els:7
Red Hat	Red Hat Enterprise Linux Server Optional (v. 7 ELS)	cpe:/o:redhat:rhel_els:7
Red Hat	Red Hat Enterprise Linux AppStream (v. 8)	cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux AppStream AUS (v. 8.2)	cpe:/a:redhat:rhel_aus:8.2::appstream
Red Hat	Red Hat Enterprise Linux AppStream AUS (v.8.4)	cpe:/a:redhat:rhel_aus:8.4::appstream
Red Hat	Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)	cpe:/a:redhat:rhel_eus_long_life:8.4::appstream
Red Hat	Red Hat Enterprise Linux AppStream AUS (v.8.6)	cpe:/a:redhat:rhel_aus:8.6::appstream
Red Hat	Red Hat Enterprise Linux AppStream E4S (v.8.6)	cpe:/a:redhat:rhel_e4s:8.6::appstream
Red Hat	Red Hat Enterprise Linux AppStream TUS (v.8.6)	cpe:/a:redhat:rhel_tus:8.6::appstream
Red Hat	Red Hat Enterprise Linux AppStream E4S (v.8.8)	cpe:/a:redhat:rhel_e4s:8.8::appstream
Red Hat	Red Hat Enterprise Linux AppStream TUS (v.8.8)	cpe:/a:redhat:rhel_tus:8.8::appstream
Red Hat	Red Hat Enterprise Linux AppStream E4S (v.9.0)	cpe:/a:redhat:rhel_e4s:9.0::appstream
Red Hat	Red Hat Enterprise Linux AppStream E4S (v.9.2)	cpe:/a:redhat:rhel_e4s:9.2::appstream
Red Hat	Red Hat Enterprise Linux AppStream EUS (v.9.4)	cpe:/a:redhat:rhel_eus:9.4::appstream
Red Hat	Red Hat Enterprise Linux AppStream (v. 9)	cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-31223",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-14T04:01:03.843196Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T18:28:39.975Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T19:50:23.028Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://seclists.org/fulldisclosure/2025/May/13"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/May/12"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/May/10"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/May/7"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2025/May/5"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:/o:redhat:rhel_els:7"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux Server (v. 7 ELS)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/o:redhat:rhel_els:7"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8::appstream"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux AppStream (v. 8)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:rhel_aus:8.2::appstream"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux AppStream AUS (v. 8.2)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:rhel_aus:8.4::appstream"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux AppStream AUS (v.8.4)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:rhel_aus:8.6::appstream"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux AppStream AUS (v.8.6)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:8.6::appstream"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux AppStream E4S (v.8.6)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:rhel_tus:8.6::appstream"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux AppStream TUS (v.8.6)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:8.8::appstream"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux AppStream E4S (v.8.8)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:rhel_tus:8.8::appstream"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux AppStream TUS (v.8.8)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.0::appstream"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux AppStream E4S (v.9.0)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.2::appstream"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux AppStream E4S (v.9.2)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.4::appstream"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux AppStream EUS (v.9.4)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9::appstream"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux AppStream (v. 9)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:6"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux 6",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "unaffected",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-03-18T00:00:00.000Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper checks."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-120",
                "description": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-01T12:05:17.786Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2025-31223"
          },
          {
            "name": "RHBZ#2448779",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448779"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-31223.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2025:19352"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2025:17802"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2025:19157"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2025:19165"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2025:19109"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2025:17807"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2025:17643"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2025:17743"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2025:17741"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2025:18097"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2025:19352: Red Hat Enterprise Linux Server (v. 7 ELS), Red Hat Enterprise Linux Server Optional (v. 7 ELS)"
          },
          {
            "lang": "en",
            "value": "RHSA-2025:17802: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2025:19157: Red Hat Enterprise Linux AppStream AUS (v. 8.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2025:19165: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2025:19109: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2025:17807: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2025:17643: Red Hat Enterprise Linux AppStream E4S (v.9.0)"
          },
          {
            "lang": "en",
            "value": "RHSA-2025:17743: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
          },
          {
            "lang": "en",
            "value": "RHSA-2025:17741: Red Hat Enterprise Linux AppStream EUS (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2025:18097: Red Hat Enterprise Linux AppStream (v. 9)"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-03-18T20:05:08.854Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-03-18T00:00:00.000Z",
            "value": "Made public."
          }
        ],
        "title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
        "workarounds": [
          {
            "lang": "en",
            "value": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.5",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.5",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.5",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.5",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.5",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "11.5",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to memory corruption."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to memory corruption",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-02T18:08:11.133Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/122404"
        },
        {
          "url": "https://support.apple.com/en-us/122716"
        },
        {
          "url": "https://support.apple.com/en-us/122719"
        },
        {
          "url": "https://support.apple.com/en-us/122720"
        },
        {
          "url": "https://support.apple.com/en-us/122721"
        },
        {
          "url": "https://support.apple.com/en-us/122722"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2025-31223",
    "datePublished": "2025-05-12T21:42:17.904Z",
    "dateReserved": "2025-03-27T16:13:58.320Z",
    "dateUpdated": "2026-07-01T12:05:17.786Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-31223",
      "date": "2026-07-13",
      "epss": "0.0053",
      "percentile": "0.41054"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-31223\",\"sourceIdentifier\":\"product-security@apple.com\",\"published\":\"2025-05-12T22:15:23.060\",\"lastModified\":\"2026-06-30T03:16:47.793\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to memory corruption.\"},{\"lang\":\"es\",\"value\":\"El problema se solucion\u00f3 mejorando las comprobaciones. Este problema est\u00e1 corregido en watchOS 11.5, tvOS 18.5, iOS 18.5 y iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5 y Safari 18.5. El procesamiento de contenido web malintencionado puede provocar da\u00f1os en la memoria.\"}],\"affected\":[{\"source\":\"product-security@apple.com\",\"affectedData\":[{\"vendor\":\"Apple\",\"product\":\"Safari\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"18.5\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Apple\",\"product\":\"iOS and iPadOS\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"18.5\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Apple\",\"product\":\"macOS\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"15.5\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Apple\",\"product\":\"tvOS\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"18.5\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Apple\",\"product\":\"visionOS\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"2.5\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Apple\",\"product\":\"watchOS\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"11.5\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux Server (v. 7 ELS)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_els:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux Server Optional (v. 7 ELS)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_els:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream (v. 8)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream AUS (v. 8.2)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.2::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream AUS (v.8.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.4::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream AUS (v.8.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.6::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream E4S (v.8.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.6::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream TUS (v.8.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.6::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream E4S (v.8.8)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.8::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream TUS (v.8.8)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.8::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream E4S (v.9.0)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.0::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream E4S (v.9.2)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream EUS (v.9.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.4::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream (v. 9)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 6\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":8.0,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.1,\"impactScore\":5.9},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2025-05-14T04:01:03.843196Z\",\"id\":\"CVE-2025-31223\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-119\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-120\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"18.5\",\"matchCriteriaId\":\"2911F28D-586D-4C43-BCE7-A8A77568E183\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"18.5\",\"matchCriteriaId\":\"D0459303-7D14-428D-9C4E-2C743AC9529F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"18.5\",\"matchCriteriaId\":\"AF6AAC00-F384-4B0D-BBA9-C2AD278BF653\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"15.5\",\"matchCriteriaId\":\"EF1B4AB8-2B51-4EED-BD29-C500C83FAB10\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"18.5\",\"matchCriteriaId\":\"519C8A39-A24E-44B7-B1E8-6EF647FEFCA8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.5\",\"matchCriteriaId\":\"047CDCCE-04BB-4D43-9831-7694992C5CC4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"11.5\",\"matchCriteriaId\":\"0CBDEF1C-6D76-4F9D-8433-3AC16F3860F4\"}]}]}],\"references\":[{\"url\":\"https://support.apple.com/en-us/122404\",\"source\":\"product-security@apple.com\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/122716\",\"source\":\"product-security@apple.com\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/122719\",\"source\":\"product-security@apple.com\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/122720\",\"source\":\"product-security@apple.com\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/122721\",\"source\":\"product-security@apple.com\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/122722\",\"source\":\"product-security@apple.com\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"http://seclists.org/fulldisclosure/2025/May/10\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://seclists.org/fulldisclosure/2025/May/12\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://seclists.org/fulldisclosure/2025/May/13\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://seclists.org/fulldisclosure/2025/May/5\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://seclists.org/fulldisclosure/2025/May/7\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:17643\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:17741\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:17743\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:17802\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:17807\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:18097\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:19109\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:19157\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:19165\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:19352\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2025-31223\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2448779\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-31223.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Important",
      "current_release_date": "2026-06-30T13:38:05+00:00",
      "cve": "CVE-2025-31223",
      "id": "CVE-2025-31223",
      "initial_release_date": "2025-01-01T00:00:00+00:00",
      "product_status:fixed": "436",
      "product_status:known_affected": "4",
      "product_status:known_not_affected": "5",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-31223.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"http://seclists.org/fulldisclosure/2025/May/13\"}, {\"url\": \"http://seclists.org/fulldisclosure/2025/May/12\"}, {\"url\": \"http://seclists.org/fulldisclosure/2025/May/10\"}, {\"url\": \"http://seclists.org/fulldisclosure/2025/May/7\"}, {\"url\": \"http://seclists.org/fulldisclosure/2025/May/5\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-03T19:50:23.028Z\"}}, {\"title\": \"webkitgtk: Processing maliciously crafted web content may lead to memory corruption\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 8.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"cpes\": [\"cpe:/o:redhat:rhel_els:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux Server (v. 7 ELS)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_els:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux Server Optional (v. 7 ELS)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream (v. 8)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.2::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream AUS (v. 8.2)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream AUS (v.8.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream AUS (v.8.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream E4S (v.8.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_tus:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream TUS (v.8.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream E4S (v.8.8)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_tus:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream TUS (v.8.8)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.0::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream E4S (v.9.0)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream E4S (v.9.2)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream EUS (v.9.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream (v. 9)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 6\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"defaultStatus\": \"unaffected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-03-18T20:05:08.854Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-03-18T00:00:00.000Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2025:19352: Red Hat Enterprise Linux Server (v. 7 ELS), Red Hat Enterprise Linux Server Optional (v. 7 ELS)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2025:17802: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2025:19157: Red Hat Enterprise Linux AppStream AUS (v. 8.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2025:19165: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2025:19109: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2025:17807: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2025:17643: Red Hat Enterprise Linux AppStream E4S (v.9.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2025:17743: Red Hat Enterprise Linux AppStream E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2025:17741: Red Hat Enterprise Linux AppStream EUS (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2025:18097: Red Hat Enterprise Linux AppStream (v. 9)\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-03-18T00:00:00.000Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2025-31223\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2448779\", \"name\": \"RHBZ#2448779\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-31223.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:19352\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:17802\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:19157\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:19165\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:19109\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:17807\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:17643\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:17743\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:17741\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:18097\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Do not process or load untrusted web content with WebKitGTK.\\n\\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\\n\\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\\n\\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\\n\\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.\"}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper checks.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-120\", \"description\": \"Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-07-01T12:05:17.786Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-31223\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-05-14T04:01:03.843196Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-119\", \"description\": \"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-05-13T13:27:36.137Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"Apple\", \"product\": \"Safari\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"18.5\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"iOS and iPadOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"18.5\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"macOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"15.5\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"tvOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"18.5\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"visionOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"2.5\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"watchOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"11.5\", \"versionType\": \"custom\"}]}], \"references\": [{\"url\": \"https://support.apple.com/en-us/122404\"}, {\"url\": \"https://support.apple.com/en-us/122716\"}, {\"url\": \"https://support.apple.com/en-us/122719\"}, {\"url\": \"https://support.apple.com/en-us/122720\"}, {\"url\": \"https://support.apple.com/en-us/122721\"}, {\"url\": \"https://support.apple.com/en-us/122722\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to memory corruption.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"Processing maliciously crafted web content may lead to memory corruption\"}]}], \"providerMetadata\": {\"orgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"shortName\": \"apple\", \"dateUpdated\": \"2026-04-02T18:08:11.133Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2025-31223\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-07-01T12:05:17.786Z\", \"dateReserved\": \"2025-03-27T16:13:58.320Z\", \"assignerOrgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"datePublished\": \"2025-05-12T21:42:17.904Z\", \"assignerShortName\": \"apple\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

WID-SEC-W-2025-1003

Vulnerability from csaf_certbund - Published: 2025-05-12 22:00 - Updated: 2025-11-23 23:00

Summary

Apple iOS und iPadOS: Mehrere Schwachstellen

Severity

Hoch

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Das Apple iOS (vormals iPhone OS) ist das Betriebssystem für das von Apple entwickelte Smartphone iPhone, iPad und iPod Touch. Das Apple iPadOS ist das Betriebssystem für das von Apple entwickelte iPad.

Angriff: Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple iOS und Apple iPadOS ausnutzen, um erweiterte Rechte zu erlangen, beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen preiszugeben oder Spoofing-Angriffe durchzuführen.

Betroffene Betriebssysteme: - MacOS X

CVE-2024-8176

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-24097

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-24111

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-24144

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-24213

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-24220

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-24223

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-24225

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-24259

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-30448

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-31196

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-31204

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-31205

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-31206

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-31207

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-31208

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-31209

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-31210

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-31212

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-31213

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-31214

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-31215

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-31216

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-31217

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-31219

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-31220

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-31221

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-31222

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-31223

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-31225

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-31226

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-31227

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-31228

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-31233

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-31234

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-31235

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-31238

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-31239

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-31241

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-31242

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-31245

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-31251

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-31253

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

CVE-2025-31257

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple iOS <18.5 Apple / iOS		<18.5
Apple iPadOS <18.5 Apple / iPadOS		<18.5
Apple iPadOS <17.7.7 Apple / iPadOS		<17.7.7

References

6 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://lists.apple.com/archives/security-announc…	external
https://lists.apple.com/archives/security-announc…	external
https://support.apple.com/en-us/122404	external
https://support.apple.com/en-us/122405	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Das Apple iOS (vormals iPhone OS) ist das Betriebssystem f\u00fcr das von Apple entwickelte Smartphone iPhone, iPad und iPod Touch.\r\nDas Apple iPadOS ist das Betriebssystem f\u00fcr das von Apple entwickelte iPad.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple iOS und Apple iPadOS ausnutzen, um erweiterte Rechte zu erlangen, beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen preiszugeben oder Spoofing-Angriffe durchzuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- MacOS X",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2025-1003 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1003.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2025-1003 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1003"
      },
      {
        "category": "external",
        "summary": "APPLE-SA-05-12-2025-1 iOS 18.5 and iPadOS 18.5 vom 2025-05-12",
        "url": "https://lists.apple.com/archives/security-announce/2025/May/msg00000.html"
      },
      {
        "category": "external",
        "summary": "APPLE-SA-05-12-2025-2 iPadOS 17.7.7 vom 2025-05-12",
        "url": "https://lists.apple.com/archives/security-announce/2025/May/msg00001.html"
      },
      {
        "category": "external",
        "summary": "iOS 18.5 and iPadOS 18.5 vom 2025-05-12",
        "url": "https://support.apple.com/en-us/122404"
      },
      {
        "category": "external",
        "summary": "iPadOS 17.7.7 vom 2025-05-12",
        "url": "https://support.apple.com/en-us/122405"
      }
    ],
    "source_lang": "en-US",
    "title": "Apple iOS und iPadOS: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2025-11-23T23:00:00.000+00:00",
      "generator": {
        "date": "2025-11-24T07:22:19.989+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.5.0"
        }
      },
      "id": "WID-SEC-W-2025-1003",
      "initial_release_date": "2025-05-12T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2025-05-12T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2025-05-15T22:00:00.000+00:00",
          "number": "2",
          "summary": "Referenz(en) aufgenommen: EUVD-2025-14780, EUVD-2025-14863"
        },
        {
          "date": "2025-11-23T23:00:00.000+00:00",
          "number": "3",
          "summary": "CVE-2025-31216 erg\u00e4nzt"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c18.5",
                "product": {
                  "name": "Apple iOS \u003c18.5",
                  "product_id": "T043555"
                }
              },
              {
                "category": "product_version",
                "name": "18.5",
                "product": {
                  "name": "Apple iOS 18.5",
                  "product_id": "T043555-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:iphone_os:18.5"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "iOS"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c18.5",
                "product": {
                  "name": "Apple iPadOS \u003c18.5",
                  "product_id": "T043556"
                }
              },
              {
                "category": "product_version",
                "name": "18.5",
                "product": {
                  "name": "Apple iPadOS 18.5",
                  "product_id": "T043556-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:ipados:18.5"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c17.7.7",
                "product": {
                  "name": "Apple iPadOS \u003c17.7.7",
                  "product_id": "T043557"
                }
              },
              {
                "category": "product_version",
                "name": "17.7.7",
                "product": {
                  "name": "Apple iPadOS 17.7.7",
                  "product_id": "T043557-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:ipados:17.7.7"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "iPadOS"
          }
        ],
        "category": "vendor",
        "name": "Apple"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-8176",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2024-8176"
    },
    {
      "cve": "CVE-2025-24097",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-24097"
    },
    {
      "cve": "CVE-2025-24111",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-24111"
    },
    {
      "cve": "CVE-2025-24144",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-24144"
    },
    {
      "cve": "CVE-2025-24213",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-24213"
    },
    {
      "cve": "CVE-2025-24220",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-24220"
    },
    {
      "cve": "CVE-2025-24223",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-24223"
    },
    {
      "cve": "CVE-2025-24225",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-24225"
    },
    {
      "cve": "CVE-2025-24259",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-24259"
    },
    {
      "cve": "CVE-2025-30448",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-30448"
    },
    {
      "cve": "CVE-2025-31196",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31196"
    },
    {
      "cve": "CVE-2025-31204",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31204"
    },
    {
      "cve": "CVE-2025-31205",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31205"
    },
    {
      "cve": "CVE-2025-31206",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31206"
    },
    {
      "cve": "CVE-2025-31207",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31207"
    },
    {
      "cve": "CVE-2025-31208",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31208"
    },
    {
      "cve": "CVE-2025-31209",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31209"
    },
    {
      "cve": "CVE-2025-31210",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31210"
    },
    {
      "cve": "CVE-2025-31212",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31212"
    },
    {
      "cve": "CVE-2025-31213",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31213"
    },
    {
      "cve": "CVE-2025-31214",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31214"
    },
    {
      "cve": "CVE-2025-31215",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31215"
    },
    {
      "cve": "CVE-2025-31216",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31216"
    },
    {
      "cve": "CVE-2025-31217",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31217"
    },
    {
      "cve": "CVE-2025-31219",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31219"
    },
    {
      "cve": "CVE-2025-31220",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31220"
    },
    {
      "cve": "CVE-2025-31221",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31221"
    },
    {
      "cve": "CVE-2025-31222",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31222"
    },
    {
      "cve": "CVE-2025-31223",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31223"
    },
    {
      "cve": "CVE-2025-31225",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31225"
    },
    {
      "cve": "CVE-2025-31226",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31226"
    },
    {
      "cve": "CVE-2025-31227",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31227"
    },
    {
      "cve": "CVE-2025-31228",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31228"
    },
    {
      "cve": "CVE-2025-31233",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31233"
    },
    {
      "cve": "CVE-2025-31234",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31234"
    },
    {
      "cve": "CVE-2025-31235",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31235"
    },
    {
      "cve": "CVE-2025-31238",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31238"
    },
    {
      "cve": "CVE-2025-31239",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31239"
    },
    {
      "cve": "CVE-2025-31241",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31241"
    },
    {
      "cve": "CVE-2025-31242",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31242"
    },
    {
      "cve": "CVE-2025-31245",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31245"
    },
    {
      "cve": "CVE-2025-31251",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31251"
    },
    {
      "cve": "CVE-2025-31253",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31253"
    },
    {
      "cve": "CVE-2025-31257",
      "product_status": {
        "known_affected": [
          "T043555",
          "T043556",
          "T043557"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31257"
    }
  ]
}

WID-SEC-W-2025-1007

Vulnerability from csaf_certbund - Published: 2025-05-12 22:00 - Updated: 2025-11-23 23:00

Summary

Apple macOS: Mehrere Schwachstellen

Severity

Hoch

Notes

Produktbeschreibung: Apple macOS ist ein Betriebssystem, das auf FreeBSD und Mach basiert.

Angriff: Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um erhöhte Privilegien zu erlangen, vertrauliche Informationen offenzulegen, beliebigen Code auszuführen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen oder einen Denial-of-Service-Zustand auszulösen.

Betroffene Betriebssysteme: - MacOS X

CVE-2024-8176

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-24142

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-24144

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-24155

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-24213

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-24222

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-24223

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-24258

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-24274

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-26465

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-26466

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-30440

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-30442

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-30443

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-30448

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-30453

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31196

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31204

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31205

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31206

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31208

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31209

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31212

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31213

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31215

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31217

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31218

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31219

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31220

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31221

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31222

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31223

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31224

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31226

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31232

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31233

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31234

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31235

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31236

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31237

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31238

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31239

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31240

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31241

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31242

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31244

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31245

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31246

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31247

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31248

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31249

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31250

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31251

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31256

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31257

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31258

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31259

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31260

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-31266

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

CVE-2025-43374

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Apple macOS Sequoia <15.5 Apple / macOS		Sequoia <15.5
Apple macOS Sonoma <14.7.6 Apple / macOS		Sonoma <14.7.6
Apple macOS Ventura <13.7.6 Apple / macOS		Ventura <13.7.6

References

8 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://lists.apple.com/archives/security-announc…	external
https://lists.apple.com/archives/security-announc…	external
https://lists.apple.com/archives/security-announc…	external
https://support.apple.com/en-us/122716	external
https://support.apple.com/en-us/122717	external
https://support.apple.com/en-us/122718	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Apple macOS ist ein Betriebssystem, das auf FreeBSD und Mach basiert.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um erh\u00f6hte Privilegien zu erlangen, vertrauliche Informationen offenzulegen, beliebigen Code auszuf\u00fchren, Daten zu manipulieren, Sicherheitsma\u00dfnahmen zu umgehen oder einen Denial-of-Service-Zustand auszul\u00f6sen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- MacOS X",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2025-1007 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1007.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2025-1007 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1007"
      },
      {
        "category": "external",
        "summary": "APPLE-SA-05-12-2025-3 macOS Sequoia 15.5 vom 2025-05-12",
        "url": "https://lists.apple.com/archives/security-announce/2025/May/msg00002.html"
      },
      {
        "category": "external",
        "summary": "APPLE-SA-05-12-2025-4 macOS Sonoma 14.7.6 vom 2025-05-12",
        "url": "https://lists.apple.com/archives/security-announce/2025/May/msg00003.html"
      },
      {
        "category": "external",
        "summary": "APPLE-SA-05-12-2025-5 macOS Ventura 13.7.6 vom 2025-05-12",
        "url": "https://lists.apple.com/archives/security-announce/2025/May/msg00004.html"
      },
      {
        "category": "external",
        "summary": "macOS Sequoia 15.5 vom 2025-05-12",
        "url": "https://support.apple.com/en-us/122716"
      },
      {
        "category": "external",
        "summary": "macOS Sonoma 14.7.6 vom 2025-05-12",
        "url": "https://support.apple.com/en-us/122717"
      },
      {
        "category": "external",
        "summary": "macOS Ventura 13.7.6 vom 2025-05-12",
        "url": "https://support.apple.com/en-us/122718"
      }
    ],
    "source_lang": "en-US",
    "title": "Apple macOS: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2025-11-23T23:00:00.000+00:00",
      "generator": {
        "date": "2025-11-24T06:17:14.247+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.5.0"
        }
      },
      "id": "WID-SEC-W-2025-1007",
      "initial_release_date": "2025-05-12T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2025-05-12T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2025-05-15T22:00:00.000+00:00",
          "number": "2",
          "summary": "Referenz(en) aufgenommen: EUVD-2025-14863, EUVD-2025-14780"
        },
        {
          "date": "2025-11-23T23:00:00.000+00:00",
          "number": "3",
          "summary": "CVE-2025-31248, CVE-2025-31266, CVE-2025-43374 erg\u00e4nzt"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "Sequoia \u003c15.5",
                "product": {
                  "name": "Apple macOS Sequoia \u003c15.5",
                  "product_id": "T043571"
                }
              },
              {
                "category": "product_version",
                "name": "Sequoia 15.5",
                "product": {
                  "name": "Apple macOS Sequoia 15.5",
                  "product_id": "T043571-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:mac_os:sequoia__15.5"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Sonoma \u003c14.7.6",
                "product": {
                  "name": "Apple macOS Sonoma \u003c14.7.6",
                  "product_id": "T043572"
                }
              },
              {
                "category": "product_version",
                "name": "Sonoma 14.7.6",
                "product": {
                  "name": "Apple macOS Sonoma 14.7.6",
                  "product_id": "T043572-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:mac_os:sonoma__14.7.6"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Ventura \u003c13.7.6",
                "product": {
                  "name": "Apple macOS Ventura \u003c13.7.6",
                  "product_id": "T043573"
                }
              },
              {
                "category": "product_version",
                "name": "Ventura 13.7.6",
                "product": {
                  "name": "Apple macOS Ventura 13.7.6",
                  "product_id": "T043573-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:apple:mac_os:ventura__13.7.6"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "macOS"
          }
        ],
        "category": "vendor",
        "name": "Apple"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-8176",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2024-8176"
    },
    {
      "cve": "CVE-2025-24142",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-24142"
    },
    {
      "cve": "CVE-2025-24144",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-24144"
    },
    {
      "cve": "CVE-2025-24155",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-24155"
    },
    {
      "cve": "CVE-2025-24213",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-24213"
    },
    {
      "cve": "CVE-2025-24222",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-24222"
    },
    {
      "cve": "CVE-2025-24223",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-24223"
    },
    {
      "cve": "CVE-2025-24258",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-24258"
    },
    {
      "cve": "CVE-2025-24274",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-24274"
    },
    {
      "cve": "CVE-2025-26465",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-26465"
    },
    {
      "cve": "CVE-2025-26466",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-26466"
    },
    {
      "cve": "CVE-2025-30440",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-30440"
    },
    {
      "cve": "CVE-2025-30442",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-30442"
    },
    {
      "cve": "CVE-2025-30443",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-30443"
    },
    {
      "cve": "CVE-2025-30448",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-30448"
    },
    {
      "cve": "CVE-2025-30453",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-30453"
    },
    {
      "cve": "CVE-2025-31196",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31196"
    },
    {
      "cve": "CVE-2025-31204",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31204"
    },
    {
      "cve": "CVE-2025-31205",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31205"
    },
    {
      "cve": "CVE-2025-31206",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31206"
    },
    {
      "cve": "CVE-2025-31208",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31208"
    },
    {
      "cve": "CVE-2025-31209",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31209"
    },
    {
      "cve": "CVE-2025-31212",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31212"
    },
    {
      "cve": "CVE-2025-31213",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31213"
    },
    {
      "cve": "CVE-2025-31215",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31215"
    },
    {
      "cve": "CVE-2025-31217",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31217"
    },
    {
      "cve": "CVE-2025-31218",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31218"
    },
    {
      "cve": "CVE-2025-31219",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31219"
    },
    {
      "cve": "CVE-2025-31220",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31220"
    },
    {
      "cve": "CVE-2025-31221",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31221"
    },
    {
      "cve": "CVE-2025-31222",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31222"
    },
    {
      "cve": "CVE-2025-31223",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31223"
    },
    {
      "cve": "CVE-2025-31224",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31224"
    },
    {
      "cve": "CVE-2025-31226",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31226"
    },
    {
      "cve": "CVE-2025-31232",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31232"
    },
    {
      "cve": "CVE-2025-31233",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31233"
    },
    {
      "cve": "CVE-2025-31234",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31234"
    },
    {
      "cve": "CVE-2025-31235",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31235"
    },
    {
      "cve": "CVE-2025-31236",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31236"
    },
    {
      "cve": "CVE-2025-31237",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31237"
    },
    {
      "cve": "CVE-2025-31238",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31238"
    },
    {
      "cve": "CVE-2025-31239",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31239"
    },
    {
      "cve": "CVE-2025-31240",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31240"
    },
    {
      "cve": "CVE-2025-31241",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31241"
    },
    {
      "cve": "CVE-2025-31242",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31242"
    },
    {
      "cve": "CVE-2025-31244",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31244"
    },
    {
      "cve": "CVE-2025-31245",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31245"
    },
    {
      "cve": "CVE-2025-31246",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31246"
    },
    {
      "cve": "CVE-2025-31247",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31247"
    },
    {
      "cve": "CVE-2025-31248",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31248"
    },
    {
      "cve": "CVE-2025-31249",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31249"
    },
    {
      "cve": "CVE-2025-31250",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31250"
    },
    {
      "cve": "CVE-2025-31251",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31251"
    },
    {
      "cve": "CVE-2025-31256",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31256"
    },
    {
      "cve": "CVE-2025-31257",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31257"
    },
    {
      "cve": "CVE-2025-31258",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31258"
    },
    {
      "cve": "CVE-2025-31259",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31259"
    },
    {
      "cve": "CVE-2025-31260",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31260"
    },
    {
      "cve": "CVE-2025-31266",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31266"
    },
    {
      "cve": "CVE-2025-43374",
      "product_status": {
        "known_affected": [
          "T043571",
          "T043572",
          "T043573"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-43374"
    }
  ]
}

WID-SEC-W-2025-1010

Vulnerability from csaf_certbund - Published: 2025-05-12 22:00 - Updated: 2025-05-15 22:00

Summary

Apple Safari: Mehrere Schwachstellen

Severity

Hoch

Notes

Produktbeschreibung: Safari ist der auf Apple Geräten eingesetzte Web Browser.

Angriff: Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple Safari ausnutzen, um einen Denial of Service Angriff durchzuführen, Informationen auszuspähen oder potentiell eigenen Code zur Ausführung zu bringen.

Betroffene Betriebssysteme: - Sonstiges - UNIX

CVE-2025-24213

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Apple Safari <18.5 Apple / Safari		<18.5

CVE-2025-24223

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Apple Safari <18.5 Apple / Safari		<18.5

CVE-2025-31204

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Apple Safari <18.5 Apple / Safari		<18.5

CVE-2025-31205

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Apple Safari <18.5 Apple / Safari		<18.5

CVE-2025-31206

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Apple Safari <18.5 Apple / Safari		<18.5

CVE-2025-31215

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Apple Safari <18.5 Apple / Safari		<18.5

CVE-2025-31217

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Apple Safari <18.5 Apple / Safari		<18.5

CVE-2025-31223

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Apple Safari <18.5 Apple / Safari		<18.5

CVE-2025-31238

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Apple Safari <18.5 Apple / Safari		<18.5

CVE-2025-31257

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Apple Safari <18.5 Apple / Safari		<18.5

References

4 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://lists.apple.com/archives/security-announc…	external
https://support.apple.com/en-us/122719	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Safari ist der auf Apple Ger\u00e4ten eingesetzte Web Browser.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple Safari ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren, Informationen auszusp\u00e4hen oder potentiell eigenen Code zur Ausf\u00fchrung zu bringen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Sonstiges\n- UNIX",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2025-1010 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1010.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2025-1010 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1010"
      },
      {
        "category": "external",
        "summary": "APPLE-SA-05-12-2025-9 Safari 18.5 vom 2025-05-12",
        "url": "https://lists.apple.com/archives/security-announce/2025/May/msg00008.html"
      },
      {
        "category": "external",
        "summary": "Safari 18.5 vom 2025-05-12",
        "url": "https://support.apple.com/en-us/122719"
      }
    ],
    "source_lang": "en-US",
    "title": "Apple Safari: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2025-05-15T22:00:00.000+00:00",
      "generator": {
        "date": "2025-05-16T07:45:35.335+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.12"
        }
      },
      "id": "WID-SEC-W-2025-1010",
      "initial_release_date": "2025-05-12T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2025-05-12T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2025-05-15T22:00:00.000+00:00",
          "number": "2",
          "summary": "Referenz(en) aufgenommen: EUVD-2025-14780"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c18.5",
                "product": {
                  "name": "Apple Safari \u003c18.5",
                  "product_id": "T043579"
                }
              },
              {
                "category": "product_version",
                "name": "18.5",
                "product": {
                  "name": "Apple Safari 18.5",
                  "product_id": "T043579-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:apple:safari:18.5"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Safari"
          }
        ],
        "category": "vendor",
        "name": "Apple"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-24213",
      "product_status": {
        "known_affected": [
          "T043579"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-24213"
    },
    {
      "cve": "CVE-2025-24223",
      "product_status": {
        "known_affected": [
          "T043579"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-24223"
    },
    {
      "cve": "CVE-2025-31204",
      "product_status": {
        "known_affected": [
          "T043579"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31204"
    },
    {
      "cve": "CVE-2025-31205",
      "product_status": {
        "known_affected": [
          "T043579"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31205"
    },
    {
      "cve": "CVE-2025-31206",
      "product_status": {
        "known_affected": [
          "T043579"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31206"
    },
    {
      "cve": "CVE-2025-31215",
      "product_status": {
        "known_affected": [
          "T043579"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31215"
    },
    {
      "cve": "CVE-2025-31217",
      "product_status": {
        "known_affected": [
          "T043579"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31217"
    },
    {
      "cve": "CVE-2025-31223",
      "product_status": {
        "known_affected": [
          "T043579"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31223"
    },
    {
      "cve": "CVE-2025-31238",
      "product_status": {
        "known_affected": [
          "T043579"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31238"
    },
    {
      "cve": "CVE-2025-31257",
      "product_status": {
        "known_affected": [
          "T043579"
        ]
      },
      "release_date": "2025-05-12T22:00:00.000+00:00",
      "title": "CVE-2025-31257"
    }
  ]
}

WID-SEC-W-2026-0782

Vulnerability from csaf_certbund - Published: 2026-03-18 23:00 - Updated: 2026-05-31 22:00

Summary

WebKitGTK: Mehrere Schwachstellen

Severity

Hoch

Notes

Produktbeschreibung: WebKitGTK ist ein Webbrowser. Dieser nutzt die WebKit-Engine, die auch von Safari und vielen anderen Apps auf macOS, iOS und Linux verwendet wird.

Angriff: Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in WebKitGTK ausnutzen, um beliebigen Programmcode auszuführen, einen Denial-of-Service-Zustand auszulösen oder vertrauliche Informationen offenzulegen.

Betroffene Betriebssysteme: - Sonstiges - UNIX

CVE-2023-43010

Affected products

Known affected 8 products

Product	Identifier	Version
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source WebKitGTK <2.44.0 Open Source / WebKitGTK		<2.44.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

CVE-2025-31223

Affected products

Known affected 9 products

Product	Identifier	Version
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Open Source WebKitGTK <2.50.0 Open Source / WebKitGTK		<2.50.0
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source WebKitGTK <2.44.0 Open Source / WebKitGTK		<2.44.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

CVE-2025-31277

Affected products

Known affected 9 products

Product	Identifier	Version
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Open Source WebKitGTK <2.50.0 Open Source / WebKitGTK		<2.50.0
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source WebKitGTK <2.44.0 Open Source / WebKitGTK		<2.44.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

CVE-2025-43213

Affected products

Known affected 10 products

Product	Identifier	Version
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Open Source WebKitGTK <2.50.0 Open Source / WebKitGTK		<2.50.0
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Open Source WebKitGTK <2.50.5 Open Source / WebKitGTK		<2.50.5
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source WebKitGTK <2.44.0 Open Source / WebKitGTK		<2.44.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

CVE-2025-43214

Affected products

Known affected 10 products

Product	Identifier	Version
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Open Source WebKitGTK <2.50.0 Open Source / WebKitGTK		<2.50.0
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Open Source WebKitGTK <2.50.5 Open Source / WebKitGTK		<2.50.5
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source WebKitGTK <2.44.0 Open Source / WebKitGTK		<2.44.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

CVE-2025-43511

Affected products

Known affected 10 products

Product	Identifier	Version
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Open Source WebKitGTK <2.50.0 Open Source / WebKitGTK		<2.50.0
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Open Source WebKitGTK <2.50.5 Open Source / WebKitGTK		<2.50.5
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source WebKitGTK <2.44.0 Open Source / WebKitGTK		<2.44.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

CVE-2025-43433

Affected products

Known affected 10 products

Product	Identifier	Version
Open Source WebKitGTK <2.50.2 Open Source / WebKitGTK		<2.50.2
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Open Source WebKitGTK <2.50.0 Open Source / WebKitGTK		<2.50.0
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source WebKitGTK <2.44.0 Open Source / WebKitGTK		<2.44.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

CVE-2025-43438

Affected products

Known affected 10 products

Product	Identifier	Version
Open Source WebKitGTK <2.50.2 Open Source / WebKitGTK		<2.50.2
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Open Source WebKitGTK <2.50.0 Open Source / WebKitGTK		<2.50.0
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source WebKitGTK <2.44.0 Open Source / WebKitGTK		<2.44.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

CVE-2025-43441

Affected products

Known affected 10 products

Product	Identifier	Version
Open Source WebKitGTK <2.50.2 Open Source / WebKitGTK		<2.50.2
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Open Source WebKitGTK <2.50.0 Open Source / WebKitGTK		<2.50.0
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source WebKitGTK <2.44.0 Open Source / WebKitGTK		<2.44.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

CVE-2025-43457

Affected products

Known affected 12 products

Product	Identifier	Version
Open Source WebKitGTK <2.50.2 Open Source / WebKitGTK		<2.50.2
Open Source WebKitGTK <2.50.6 Open Source / WebKitGTK		<2.50.6
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Open Source WebKitGTK <2.50.0 Open Source / WebKitGTK		<2.50.0
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Open Source WebKitGTK <2.50.5 Open Source / WebKitGTK		<2.50.5
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source WebKitGTK <2.44.0 Open Source / WebKitGTK		<2.44.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

CVE-2026-20608

Affected products

Known affected 12 products

Product	Identifier	Version
Open Source WebKitGTK <2.50.2 Open Source / WebKitGTK		<2.50.2
Open Source WebKitGTK <2.50.6 Open Source / WebKitGTK		<2.50.6
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Open Source WebKitGTK <2.50.0 Open Source / WebKitGTK		<2.50.0
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Open Source WebKitGTK <2.50.5 Open Source / WebKitGTK		<2.50.5
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source WebKitGTK <2.44.0 Open Source / WebKitGTK		<2.44.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

CVE-2026-20635

Affected products

Known affected 12 products

Product	Identifier	Version
Open Source WebKitGTK <2.50.2 Open Source / WebKitGTK		<2.50.2
Open Source WebKitGTK <2.50.6 Open Source / WebKitGTK		<2.50.6
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Open Source WebKitGTK <2.50.0 Open Source / WebKitGTK		<2.50.0
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Open Source WebKitGTK <2.50.5 Open Source / WebKitGTK		<2.50.5
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source WebKitGTK <2.44.0 Open Source / WebKitGTK		<2.44.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

CVE-2026-20636

Affected products

Known affected 12 products

Product	Identifier	Version
Open Source WebKitGTK <2.50.2 Open Source / WebKitGTK		<2.50.2
Open Source WebKitGTK <2.50.6 Open Source / WebKitGTK		<2.50.6
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Open Source WebKitGTK <2.50.0 Open Source / WebKitGTK		<2.50.0
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Open Source WebKitGTK <2.50.5 Open Source / WebKitGTK		<2.50.5
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source WebKitGTK <2.44.0 Open Source / WebKitGTK		<2.44.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

CVE-2026-20644

Affected products

Known affected 12 products

Product	Identifier	Version
Open Source WebKitGTK <2.50.2 Open Source / WebKitGTK		<2.50.2
Open Source WebKitGTK <2.50.6 Open Source / WebKitGTK		<2.50.6
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Open Source WebKitGTK <2.50.0 Open Source / WebKitGTK		<2.50.0
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Open Source WebKitGTK <2.50.5 Open Source / WebKitGTK		<2.50.5
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source WebKitGTK <2.44.0 Open Source / WebKitGTK		<2.44.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

CVE-2026-20652

Affected products

Known affected 12 products

Product	Identifier	Version
Open Source WebKitGTK <2.50.2 Open Source / WebKitGTK		<2.50.2
Open Source WebKitGTK <2.50.6 Open Source / WebKitGTK		<2.50.6
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Open Source WebKitGTK <2.50.0 Open Source / WebKitGTK		<2.50.0
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Open Source WebKitGTK <2.50.5 Open Source / WebKitGTK		<2.50.5
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source WebKitGTK <2.44.0 Open Source / WebKitGTK		<2.44.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

CVE-2026-20676

Affected products

Known affected 12 products

Product	Identifier	Version
Open Source WebKitGTK <2.50.2 Open Source / WebKitGTK		<2.50.2
Open Source WebKitGTK <2.50.6 Open Source / WebKitGTK		<2.50.6
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Open Source WebKitGTK <2.50.0 Open Source / WebKitGTK		<2.50.0
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Open Source WebKitGTK <2.50.5 Open Source / WebKitGTK		<2.50.5
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source WebKitGTK <2.44.0 Open Source / WebKitGTK		<2.44.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

CVE-2025-46299

Affected products

Known affected 13 products

Product	Identifier	Version
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—
Open Source WebKitGTK <2.52.0 Open Source / WebKitGTK		<2.52.0
Open Source WebKitGTK <2.50.2 Open Source / WebKitGTK		<2.50.2
Open Source WebKitGTK <2.50.6 Open Source / WebKitGTK		<2.50.6
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Open Source WebKitGTK <2.50.0 Open Source / WebKitGTK		<2.50.0
Open Source WebKitGTK <2.50.5 Open Source / WebKitGTK		<2.50.5
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source WebKitGTK <2.44.0 Open Source / WebKitGTK		<2.44.0
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—

References

29 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://webkitgtk.org/security/WSA-2026-0001.html	external
https://security-tracker.debian.org/tracker/DSA-6172-1	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://alas.aws.amazon.com/AL2/ALAS2-2026-3223.html	external
https://lists.debian.org/debian-lts-announce/2026…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://access.redhat.com/errata/RHSA-2026:9692	external
https://linux.oracle.com/errata/ELSA-2026-9692.html	external
https://errata.build.resf.org/RLSA-2026:9692	external
https://access.redhat.com/errata/RHSA-2026:10702	external
https://errata.build.resf.org/RLSA-2026:10702	external
https://access.redhat.com/errata/RHSA-2026:11329	external
https://linux.oracle.com/errata/ELSA-2026-10702.html	external
https://lists.debian.org/debian-security-announce…	external
https://access.redhat.com/errata/RHSA-2026:11814	external
https://alas.aws.amazon.com/AL2/ALAS2-2026-3270.html	external
https://access.redhat.com/errata/RHSA-2026:13845	external
https://access.redhat.com/errata/RHSA-2026:14659	external
https://ubuntu.com/security/notices/USN-8237-1	external
https://access.redhat.com/errata/RHSA-2026:16056	external
https://access.redhat.com/errata/RHSA-2026:16695	external
https://access.redhat.com/errata/RHSA-2026:19535	external
https://access.redhat.com/errata/RHSA-2026:19206	external
https://errata.build.resf.org/RLSA-2026:19206	external
https://access.redhat.com/errata/RHSA-2026:22136	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "WebKitGTK ist ein Webbrowser. Dieser nutzt die WebKit-Engine, die auch von Safari und vielen anderen Apps auf macOS, iOS und Linux verwendet wird.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in WebKitGTK ausnutzen, um beliebigen Programmcode auszuf\u00fchren, einen Denial-of-Service-Zustand auszul\u00f6sen oder vertrauliche Informationen offenzulegen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Sonstiges\n- UNIX",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-0782 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0782.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-0782 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0782"
      },
      {
        "category": "external",
        "summary": "WebKitGTK and WPE WebKit Security Advisory WSA-2026-0001 vom 2026-03-18",
        "url": "https://webkitgtk.org/security/WSA-2026-0001.html"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-6172 vom 2026-03-21",
        "url": "https://security-tracker.debian.org/tracker/DSA-6172-1"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2026:1139-1 vom 2026-03-31",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-March/025063.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2026:1150-1 vom 2026-03-31",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-March/025065.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS2-2026-3223 vom 2026-04-01",
        "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3223.html"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-4528 vom 2026-04-11",
        "url": "https://lists.debian.org/debian-lts-announce/2026/04/msg00007.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2026:1364-1 vom 2026-04-15",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-April/025356.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2026:21180-1 vom 2026-04-21",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-April/025532.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:9692 vom 2026-04-22",
        "url": "https://access.redhat.com/errata/RHSA-2026:9692"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-9692 vom 2026-04-22",
        "url": "https://linux.oracle.com/errata/ELSA-2026-9692.html"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2026:9692 vom 2026-04-24",
        "url": "https://errata.build.resf.org/RLSA-2026:9692"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:10702 vom 2026-04-27",
        "url": "https://access.redhat.com/errata/RHSA-2026:10702"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2026:10702 vom 2026-04-27",
        "url": "https://errata.build.resf.org/RLSA-2026:10702"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:11329 vom 2026-04-28",
        "url": "https://access.redhat.com/errata/RHSA-2026:11329"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-10702 vom 2026-04-28",
        "url": "https://linux.oracle.com/errata/ELSA-2026-10702.html"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-6232 vom 2026-04-28",
        "url": "https://lists.debian.org/debian-security-announce/2026/msg00142.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:11814 vom 2026-04-29",
        "url": "https://access.redhat.com/errata/RHSA-2026:11814"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS2-2026-3270 vom 2026-04-30",
        "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3270.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:13845 vom 2026-05-05",
        "url": "https://access.redhat.com/errata/RHSA-2026:13845"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:14659 vom 2026-05-07",
        "url": "https://access.redhat.com/errata/RHSA-2026:14659"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-8237-1 vom 2026-05-06",
        "url": "https://ubuntu.com/security/notices/USN-8237-1"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:16056 vom 2026-05-11",
        "url": "https://access.redhat.com/errata/RHSA-2026:16056"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:16695 vom 2026-05-13",
        "url": "https://access.redhat.com/errata/RHSA-2026:16695"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:19535 vom 2026-05-20",
        "url": "https://access.redhat.com/errata/RHSA-2026:19535"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:19206 vom 2026-05-20",
        "url": "https://access.redhat.com/errata/RHSA-2026:19206"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2026:19206 vom 2026-05-28",
        "url": "https://errata.build.resf.org/RLSA-2026:19206"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:22136 vom 2026-06-01",
        "url": "https://access.redhat.com/errata/RHSA-2026:22136"
      }
    ],
    "source_lang": "en-US",
    "title": "WebKitGTK: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-05-31T22:00:00.000+00:00",
      "generator": {
        "date": "2026-06-01T07:24:01.812+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.6.0"
        }
      },
      "id": "WID-SEC-W-2026-0782",
      "initial_release_date": "2026-03-18T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-03-18T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2026-03-22T23:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2026-03-30T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2026-04-01T22:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2026-04-12T22:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2026-04-15T22:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2026-04-21T22:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2026-04-22T22:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2026-04-26T22:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von Rocky Enterprise Software Foundation und Red Hat aufgenommen"
        },
        {
          "date": "2026-04-27T22:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von Rocky Enterprise Software Foundation aufgenommen"
        },
        {
          "date": "2026-04-28T22:00:00.000+00:00",
          "number": "11",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2026-04-29T22:00:00.000+00:00",
          "number": "12",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-05-05T22:00:00.000+00:00",
          "number": "13",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-05-06T22:00:00.000+00:00",
          "number": "14",
          "summary": "Neue Updates von Red Hat und Ubuntu aufgenommen"
        },
        {
          "date": "2026-05-11T22:00:00.000+00:00",
          "number": "15",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-05-12T22:00:00.000+00:00",
          "number": "16",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-05-19T22:00:00.000+00:00",
          "number": "17",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-05-28T22:00:00.000+00:00",
          "number": "18",
          "summary": "Neue Updates von Rocky Enterprise Software Foundation aufgenommen"
        },
        {
          "date": "2026-05-31T22:00:00.000+00:00",
          "number": "19",
          "summary": "Neue Updates von Red Hat aufgenommen"
        }
      ],
      "status": "final",
      "version": "19"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Amazon Linux 2",
            "product": {
              "name": "Amazon Linux 2",
              "product_id": "398363",
              "product_identification_helper": {
                "cpe": "cpe:/o:amazon:linux_2:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Amazon"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Debian Linux",
            "product": {
              "name": "Debian Linux",
              "product_id": "2951",
              "product_identification_helper": {
                "cpe": "cpe:/o:debian:debian_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Debian"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c2.44.0",
                "product": {
                  "name": "Open Source WebKitGTK \u003c2.44.0",
                  "product_id": "T051900"
                }
              },
              {
                "category": "product_version",
                "name": "2.44.0",
                "product": {
                  "name": "Open Source WebKitGTK 2.44.0",
                  "product_id": "T051900-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:webkitgtk:webkitgtk:2.44.0"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c2.50.0",
                "product": {
                  "name": "Open Source WebKitGTK \u003c2.50.0",
                  "product_id": "T051901"
                }
              },
              {
                "category": "product_version",
                "name": "2.50.0",
                "product": {
                  "name": "Open Source WebKitGTK 2.50.0",
                  "product_id": "T051901-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:webkitgtk:webkitgtk:2.50.0"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c2.50.5",
                "product": {
                  "name": "Open Source WebKitGTK \u003c2.50.5",
                  "product_id": "T051902"
                }
              },
              {
                "category": "product_version",
                "name": "2.50.5",
                "product": {
                  "name": "Open Source WebKitGTK 2.50.5",
                  "product_id": "T051902-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:webkitgtk:webkitgtk:2.50.5"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c2.50.2",
                "product": {
                  "name": "Open Source WebKitGTK \u003c2.50.2",
                  "product_id": "T051903"
                }
              },
              {
                "category": "product_version",
                "name": "2.50.2",
                "product": {
                  "name": "Open Source WebKitGTK 2.50.2",
                  "product_id": "T051903-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:webkitgtk:webkitgtk:2.50.2"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c2.50.6",
                "product": {
                  "name": "Open Source WebKitGTK \u003c2.50.6",
                  "product_id": "T051904"
                }
              },
              {
                "category": "product_version",
                "name": "2.50.6",
                "product": {
                  "name": "Open Source WebKitGTK 2.50.6",
                  "product_id": "T051904-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:webkitgtk:webkitgtk:2.50.6"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c2.52.0",
                "product": {
                  "name": "Open Source WebKitGTK \u003c2.52.0",
                  "product_id": "T051905"
                }
              },
              {
                "category": "product_version",
                "name": "2.52.0",
                "product": {
                  "name": "Open Source WebKitGTK 2.52.0",
                  "product_id": "T051905-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:webkitgtk:webkitgtk:2.52.0"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "WebKitGTK"
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T004914",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "RESF Rocky Linux",
            "product": {
              "name": "RESF Rocky Linux",
              "product_id": "T032255",
              "product_identification_helper": {
                "cpe": "cpe:/o:resf:rocky_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "RESF"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T000126",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-43010",
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "67646",
          "T000126",
          "T051900",
          "398363",
          "T004914",
          "T032255"
        ]
      },
      "release_date": "2026-03-18T23:00:00.000+00:00",
      "title": "CVE-2023-43010"
    },
    {
      "cve": "CVE-2025-31223",
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "T051901",
          "67646",
          "T000126",
          "T051900",
          "398363",
          "T004914",
          "T032255"
        ]
      },
      "release_date": "2026-03-18T23:00:00.000+00:00",
      "title": "CVE-2025-31223"
    },
    {
      "cve": "CVE-2025-31277",
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "T051901",
          "67646",
          "T000126",
          "T051900",
          "398363",
          "T004914",
          "T032255"
        ]
      },
      "release_date": "2026-03-18T23:00:00.000+00:00",
      "title": "CVE-2025-31277"
    },
    {
      "cve": "CVE-2025-43213",
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "T051901",
          "67646",
          "T051902",
          "T000126",
          "T051900",
          "398363",
          "T004914",
          "T032255"
        ]
      },
      "release_date": "2026-03-18T23:00:00.000+00:00",
      "title": "CVE-2025-43213"
    },
    {
      "cve": "CVE-2025-43214",
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "T051901",
          "67646",
          "T051902",
          "T000126",
          "T051900",
          "398363",
          "T004914",
          "T032255"
        ]
      },
      "release_date": "2026-03-18T23:00:00.000+00:00",
      "title": "CVE-2025-43214"
    },
    {
      "cve": "CVE-2025-43511",
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "T051901",
          "67646",
          "T051902",
          "T000126",
          "T051900",
          "398363",
          "T004914",
          "T032255"
        ]
      },
      "release_date": "2026-03-18T23:00:00.000+00:00",
      "title": "CVE-2025-43511"
    },
    {
      "cve": "CVE-2025-43433",
      "product_status": {
        "known_affected": [
          "T051903",
          "2951",
          "T002207",
          "T051901",
          "67646",
          "T000126",
          "T051900",
          "398363",
          "T004914",
          "T032255"
        ]
      },
      "release_date": "2026-03-18T23:00:00.000+00:00",
      "title": "CVE-2025-43433"
    },
    {
      "cve": "CVE-2025-43438",
      "product_status": {
        "known_affected": [
          "T051903",
          "2951",
          "T002207",
          "T051901",
          "67646",
          "T000126",
          "T051900",
          "398363",
          "T004914",
          "T032255"
        ]
      },
      "release_date": "2026-03-18T23:00:00.000+00:00",
      "title": "CVE-2025-43438"
    },
    {
      "cve": "CVE-2025-43441",
      "product_status": {
        "known_affected": [
          "T051903",
          "2951",
          "T002207",
          "T051901",
          "67646",
          "T000126",
          "T051900",
          "398363",
          "T004914",
          "T032255"
        ]
      },
      "release_date": "2026-03-18T23:00:00.000+00:00",
      "title": "CVE-2025-43441"
    },
    {
      "cve": "CVE-2025-43457",
      "product_status": {
        "known_affected": [
          "T051903",
          "T051904",
          "2951",
          "T002207",
          "T051901",
          "67646",
          "T051902",
          "T000126",
          "T051900",
          "398363",
          "T004914",
          "T032255"
        ]
      },
      "release_date": "2026-03-18T23:00:00.000+00:00",
      "title": "CVE-2025-43457"
    },
    {
      "cve": "CVE-2026-20608",
      "product_status": {
        "known_affected": [
          "T051903",
          "T051904",
          "2951",
          "T002207",
          "T051901",
          "67646",
          "T051902",
          "T000126",
          "T051900",
          "398363",
          "T004914",
          "T032255"
        ]
      },
      "release_date": "2026-03-18T23:00:00.000+00:00",
      "title": "CVE-2026-20608"
    },
    {
      "cve": "CVE-2026-20635",
      "product_status": {
        "known_affected": [
          "T051903",
          "T051904",
          "2951",
          "T002207",
          "T051901",
          "67646",
          "T051902",
          "T000126",
          "T051900",
          "398363",
          "T004914",
          "T032255"
        ]
      },
      "release_date": "2026-03-18T23:00:00.000+00:00",
      "title": "CVE-2026-20635"
    },
    {
      "cve": "CVE-2026-20636",
      "product_status": {
        "known_affected": [
          "T051903",
          "T051904",
          "2951",
          "T002207",
          "T051901",
          "67646",
          "T051902",
          "T000126",
          "T051900",
          "398363",
          "T004914",
          "T032255"
        ]
      },
      "release_date": "2026-03-18T23:00:00.000+00:00",
      "title": "CVE-2026-20636"
    },
    {
      "cve": "CVE-2026-20644",
      "product_status": {
        "known_affected": [
          "T051903",
          "T051904",
          "2951",
          "T002207",
          "T051901",
          "67646",
          "T051902",
          "T000126",
          "T051900",
          "398363",
          "T004914",
          "T032255"
        ]
      },
      "release_date": "2026-03-18T23:00:00.000+00:00",
      "title": "CVE-2026-20644"
    },
    {
      "cve": "CVE-2026-20652",
      "product_status": {
        "known_affected": [
          "T051903",
          "T051904",
          "2951",
          "T002207",
          "T051901",
          "67646",
          "T051902",
          "T000126",
          "T051900",
          "398363",
          "T004914",
          "T032255"
        ]
      },
      "release_date": "2026-03-18T23:00:00.000+00:00",
      "title": "CVE-2026-20652"
    },
    {
      "cve": "CVE-2026-20676",
      "product_status": {
        "known_affected": [
          "T051903",
          "T051904",
          "2951",
          "T002207",
          "T051901",
          "67646",
          "T051902",
          "T000126",
          "T051900",
          "398363",
          "T004914",
          "T032255"
        ]
      },
      "release_date": "2026-03-18T23:00:00.000+00:00",
      "title": "CVE-2026-20676"
    },
    {
      "cve": "CVE-2025-46299",
      "product_status": {
        "known_affected": [
          "67646",
          "T004914",
          "T032255",
          "T051905",
          "T051903",
          "T051904",
          "2951",
          "T002207",
          "T051901",
          "T051902",
          "T000126",
          "T051900",
          "398363"
        ]
      },
      "release_date": "2026-03-18T23:00:00.000+00:00",
      "title": "CVE-2025-46299"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2025-31223 (GCVE-0-2025-31223)

WID-SEC-W-2025-1003

WID-SEC-W-2025-1007

WID-SEC-W-2025-1010

WID-SEC-W-2026-0782

Tags

Sightings

Nomenclature