CVE-2025-24201—Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability

漏洞名称

Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability

描述

Apple iOS, iPadOS, macOS, and other Apple products contain an out-of-bounds write vulnerability in WebKit that may allow maliciously crafted web content to break out of Web Content sandbox. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

其他说明

• https://support.apple.com/en-us/122281
• https://support.apple.com/en-us/122283
• https://support.apple.com/en-us/122284
• https://support.apple.com/en-us/122285
• https://nvd.nist.gov/vuln/detail/CVE-2025-24201

相关新闻文章

• Apple backports zero-day patches to older iPhones and iPadsSeptember 16, 2025
• Apple Patches CVE-2025-43300 Zero-Day in iOS, iPadOS, and macOS Exploited in Targeted AttacksAugust 21, 2025
• Apple fixes new zero-day flaw exploited in targeted attacksAugust 20, 2025
• Apple patches security flaw exploited in Chrome zero-day attacksJuly 30, 2025
• Apple Patches Two Actively Exploited iOS Flaws Used in Sophisticated Targeted AttacksApril 17, 2025

相关 CWE

• CWE-787