High WID-SEC-2025-0667 14 CVEs

Apple Safari: Mehrere Schwachstellen

Published Mar 31, 2025 · Updated Mar 31, 2025 · de-DE

Vendor: Apple Product: Safari Platform: macOS

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple Safari ausnutzen, um vertrauliche Informationen preiszugeben, Spoofing- und Cross-Site-Scripting-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu verursachen, beliebigen Code auszuführen und Daten zu manipulieren.

Product

Safari ist der auf Apple Geräten eingesetzte Web Browser.

Vulnerabilities 14

Critical 9.8

CVE-2025-24167

This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers

Mar 31, 2025
Critical 9.8

CVE-2025-24264

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iP…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Mar 31, 2025
High 8.1

CVE-2025-24180

The issue was addressed with improved input validation. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, m…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers

Mar 31, 2025
High 7.8

CVE-2025-24213

This issue was addressed with improved handling of floats. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Mar 31, 2025
High 7.8

CVE-2025-31184

This issue was addressed with improved permissions checking. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers

Mar 31, 2025
High 7.0

CVE-2025-24209

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and i…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Mar 31, 2025
Medium 6.7

CVE-2025-31192

The issue was addressed with improved checks. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequo…

Apple macOS iOS and iPadOS Safari macOS iOS Browsers

Mar 31, 2025
Medium 6.5

CVE-2025-24192

A script imports issue was addressed with improved isolation. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 1…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers

Mar 31, 2025
Medium 6.1

CVE-2025-24208

A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS…

Apple iOS and iPadOS Safari qtwebkit-source iOS Browsers Debian Ubuntu

Mar 31, 2025
Medium 4.3

CVE-2025-24113

The issue was addressed with improved UI. This issue is fixed in Safari 18.3, Safari 18.4, iOS 18.3 and iPadOS 18.3, iO…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers

Jan 27, 2025
Medium 4.3

CVE-2025-24216

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iP…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Mar 31, 2025
Medium 4.3

CVE-2025-30425

This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers

Mar 31, 2025
Medium 4.3

CVE-2025-30427

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.4, iOS 18.4 and …

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Mar 31, 2025
Medium 4.3

CVE-2025-30467

The issue was addressed with improved checks. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequo…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers

Mar 31, 2025

Revision history

2025-03-31 #1
Initiale Fassung

References

About the security content of Safari 18.4 vom 2025-03-31
https://support.apple.com/en-us/122379