Medium WID-SEC-2025-2058 9 CVEs

Apple Safari: Mehrere Schwachstellen

Published Sep 15, 2025 · Updated Nov 4, 2025 · Revision 4 · de-DE

Vendor: Apple Vendor: Fedora Product: Linux Product: Safari Platform: macOS

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple Safari ausnutzen, um einen Denial of Service Zustand herbeizuführen, Informationen preiszugeben und falsche Informationen anzuzeigen.

Product

Safari ist der auf Apple Geräten eingesetzte Web Browser.

Vulnerabilities 9

Critical 9.8

CVE-2025-43342

A correctness issue was addressed with improved checks. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iOS…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Sep 15, 2025
Critical 9.8

CVE-2025-43343

The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Ta…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Sep 15, 2025
High 8.8

CVE-2025-43419

The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Ta…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Nov 4, 2025
High 7.5

CVE-2025-43376

A logic issue was addressed with improved state management. This issue is fixed in Safari 26, iOS 18.7.7 and iPadOS 18.…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers

Nov 4, 2025
Medium 6.5

CVE-2025-43272

The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Ta…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Sep 15, 2025
Medium 6.5

CVE-2025-43327

The issue was addressed by adding additional logic. This issue is fixed in Safari 26, macOS Tahoe 26. Visiting a malici…

Apple macOS Safari macOS Browsers

Sep 15, 2025
Medium 6.5

CVE-2025-43356

The issue was addressed with improved handling of caches. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, i…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Sep 15, 2025
Medium 5.4

CVE-2025-31254

This issue was addressed with improved URL validation. This issue is fixed in Safari 26, iOS 26 and iPadOS 26. Processi…

Apple iOS and iPadOS Safari iOS Browsers

Sep 15, 2025
Medium 4.3

CVE-2025-43368

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26, iOS 26 and iPad…

Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu

Sep 15, 2025

Revision history

2025-11-04 #4
Referenz(en) aufgenommen: EUVD-2025-37659
2025-11-03 #3
CVE-2025-43376 + CVE-2025-43419 ergänzt
2025-09-24 #2
Neue Updates von Fedora aufgenommen
2025-09-15 #1
Initiale Fassung

References

APPLE-SA-09-15-2025-11 Safari 26 vom 2025-09-15
https://lists.apple.com/archives/security-announce/2025/Sep/msg00010.html
Safari 26 vom 2025-09-15
https://support.apple.com/en-us/125113
Fedora Security Advisory FEDORA-2025-F2BFDE9326 vom 2025-09-24
https://bodhi.fedoraproject.org/updates/FEDORA-2025-f2bfde9326