Medium 2 exploited CVEs WID-SEC-2025-1683 17 CVEs

Apple Safari: Mehrere Schwachstellen

Published Jul 30, 2025 · Updated Mar 22, 2026 · Revision 2 · de-DE

Vendor: Apple Product: Safari Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in Apple Safari ausnutzen, um Informationen offenzulegen, um einen Denial of Service Angriff durchzuführen, um einen Cross-Site Scripting Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.

Product

Safari ist der auf Apple Geräten eingesetzte Web Browser.

Vulnerabilities 17

High 8.8

CVE-2025-31277 Exploited Public exploit

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, ma…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 29, 2025
KEV Mar 20, 2026
High 8.8

CVE-2025-6558 Exploited Public exploit EPSS 11%

Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote a…

Google Chrome chromium chromium Browsers Debian Ubuntu Azure Linux Alpine Wolfi

Jul 15, 2025
KEV Jul 22, 2025
High 8.8

CVE-2025-31273

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, ma…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 29, 2025
High 8.8

CVE-2025-31278

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, iP…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 29, 2025
High 7.8

CVE-2025-7425

Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr

A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this corruption prevents the proper cleanup of ID attr…

Red Hat GNOME Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux Wolfi

Jul 10, 2025
High 7.5

CVE-2025-43227

This issue was addressed through improved state management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 29, 2025
High 7.5

CVE-2025-7424

Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes

A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In…

Red Hat GNOME Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux

Jul 10, 2025
Medium 6.5

CVE-2025-24188

A logic issue was addressed with improved checks. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. Processing ma…

Apple macOS Safari macOS Browsers

Jul 29, 2025
Medium 6.5

CVE-2025-43212

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, ma…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 29, 2025
Medium 6.5

CVE-2025-43213

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, ma…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 29, 2025
Medium 6.5

CVE-2025-43214

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, ma…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 29, 2025
Medium 6.5

CVE-2025-43216

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.6, iOS 18.6 and …

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 29, 2025
Medium 6.2

CVE-2025-43211

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, iP…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 29, 2025
Medium 6.2

CVE-2025-43240

A logic issue was addressed with improved checks. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. A download's …

Apple macOS Safari qtwebkit-source macOS Browsers Debian Ubuntu

Jul 29, 2025
Medium 6.1

CVE-2025-43229

This issue was addressed through improved state management. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. Pro…

Apple macOS Safari macOS Browsers

Jul 29, 2025
Medium 4.3

CVE-2025-43228

The issue was addressed with improved UI. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6. Visiting a mali…

Apple iOS and iPadOS Safari qtwebkit-source iOS Browsers Debian Ubuntu

Jul 29, 2025
Medium 4.0

CVE-2025-43265

An out-of-bounds read was addressed with improved input validation. This issue is fixed in Safari 18.6, iOS 18.6 and iP…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 29, 2025

Revision history

2026-03-22 #2
Aktive Ausnutzung gemeldet
2025-07-30 #1
Initiale Fassung

References

Apple Safari Security Updates vom 2025-07-30
https://support.apple.com/en-us/124152
CISA Known Exploited Vulnerabilities Catalog vom 2026-03-22
https://www.cisa.gov/known-exploited-vulnerabilities-catalog