High 2 exploited CVEs WID-SEC-2025-2837 11 CVEs

Apple Safari: Mehrere Schwachstellen

Published Dec 14, 2025 · Updated Dec 17, 2025 · Revision 2 · de-DE

Vendor: Apple Product: Safari Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in Apple Safari ausnutzen, um beliebigen Programmcode auszuführen, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen, Speicherbeschädigungen durchzuführen und andere, nicht spezifizierte Angriffe durchzuführen.

Product

Safari ist der auf Apple Geräten eingesetzte Web Browser.

Vulnerabilities 11

High 8.8

CVE-2025-14174 Exploited Public exploit EPSS 43%

Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perfo…

Google Chrome chromium qtwebkit-source Browsers Debian Ubuntu Alpine Wolfi

Dec 12, 2025
KEV Dec 12, 2025
High 8.8

CVE-2025-43529 Exploited Public exploit EPSS 26%

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 an…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Dec 17, 2025
KEV Dec 15, 2025
Critical 9.8

CVE-2025-43526

This issue was addressed with improved URL validation. This issue is fixed in Safari 26.2, macOS Tahoe 26.2. On a Mac w…

Apple macOS Safari macOS Browsers

Dec 17, 2025
Medium 6.5

CVE-2025-43511

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.2 an…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Dec 12, 2025
Medium 5.5

CVE-2025-46282

The issue was addressed with additional permissions checks. This issue is fixed in Safari 26.2, macOS Tahoe 26.2. An ap…

Apple macOS Safari macOS Browsers

Dec 17, 2025
Medium 4.3

CVE-2024-8906

Incorrect security UI in Downloads in Google Chrome prior to 129.0.6668.58 allowed a remote attacker who convinced a us…

Google Chrome chromium chromium Browsers Debian Wolfi

Sep 17, 2024
Medium 4.3

CVE-2025-43501

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu

Dec 17, 2025
Medium 4.3

CVE-2025-43535

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu

Dec 17, 2025
Medium 4.3

CVE-2025-43536

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 an…

Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu

Dec 17, 2025
Medium 4.3

CVE-2025-43541 Public exploit EPSS 34%

A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and i…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu

Dec 17, 2025
Low 3.1

CVE-2025-43531

A race condition was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS …

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Dec 17, 2025

Revision history

2025-12-17 #2
Referenz(en) aufgenommen: EUVD-2025-203963, EUVD-2025-203976, EUVD-2025-203977, EUVD-2025-203968, EUVD-2025-203967, EUVD-2025-203974, EUVD-2025-203981, EUVD-2025-203971, ZDI-25-1126, ZDI-CAN-28284, ZDI-25-1127, ZDI-CAN-28038
2025-12-14 #1
Initiale Fassung

References

Apple Security Advisory vom 2025-12-14
https://support.apple.com/en-us/125892