← Back to browse · API

CVE-2025-31277

Severity
HIGH
CVSS
8.8
EPSS
0.01481
Risk score
60.72
CISA KEV
Yes
PoC
No
Published
2025-07-29
Modified
2026-07-15
First seen
2026-08-07
Aliases
EUVD-2025-23063, GHSA-VRFH-8V52-6452
Products
Apple:Multiple Products, Apple:Safari 0 <18.6, Apple:iOS and iPadOS 0 <18.6, Apple:macOS 0 <15.6, Apple:tvOS 0 <18.6, Apple:visionOS 0 <2.6, Apple:watchOS 0 <11.6
Sources
cisa.gov CVE-2025-31277
euvd EUVD-2025-23063

Description

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.

References