CVE-2025-43212

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, macOS Sequoia 15.6, iOS 18.6 and iPadOS 18.6, tvOS 18.6, watchOS 11.6, visionOS 2.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
appleCNA
---
---
CISA-ADPADP
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 13%
VendorProductVersion
applesafari
𝑥
< 18.6
appleipados
𝑥
< 18.6
appleiphone_os
𝑥
< 18.6
applemacos
𝑥
< 15.6
appletvos
𝑥
< 18.6
applevisionos
𝑥
< 2.6
applewatchos
𝑥
< 11.6
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
webkitgtk
plucky
dne
noble
dne
jammy
dne
bionic
ignored
xenial
ignored
webkit2gtk
plucky
Fixed 2.48.5-0ubuntu0.25.04.1
released
noble
Fixed 2.48.5-0ubuntu0.24.04.1
released
jammy
Fixed 2.48.5-0ubuntu0.22.04.1
released
focal
ignored
bionic
ignored
xenial
ignored
qtwebkit-source
plucky
dne
noble
dne
jammy
dne
bionic
ignored
xenial
ignored
qtwebkit-opensource-src
plucky
dne
noble
ignored
jammy
ignored
focal
ignored
bionic
ignored
xenial
ignored
wpewebkit
plucky
dne
noble
dne
jammy
ignored
focal
ignored