Safari CVE-2025-43211

MEDIUM

Allocation of Resources Without Limits or Throttling (CWE-770)

2025-07-30 product-security@apple.com

Denial Of Service Memory Corruption Apple iOS macOS Red Hat Ipados Iphone Os Safari Tvos Visionos Watchos Suse

6.2

CVSS 3.1 · NVD

View

Vulnerability Assessment

Weakness	CWE CWE-770 OWASP Top 10:2025 A06:2025 - Insecure Design ASVS 5.0 V2 - Validation and Business Logic Resource allocation limits MITRE ATT&CK 1 technique across 1 tactic: Impact The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. Sign in to read
Impact	Despite the CVSS 6.2 score suggesting moderate severity, multiple risk indicators suggest limited real-world priority. The EPSS score of 0.02% (5th percentile) indicates extremely low exploitation probability in observed threat activity, suggesting this vulnerability has not attracted active attacker interest. The attack vector is local (AV:L), not remote, significantly constraining exploitation scope compared to network-accessible vulnerabilities. No public exploit code or active exploitation via CISA KEV has been reported. The impact is denial-of-service only (no confidentiality or integrity compromise), limiting business impact to availability disruption. Organizations should prioritize higher-EPSS vulnerabilities, but should still apply available patches during routine update cycles given the simplicity of deployment.
Exploit ScenarioDerived	An attacker could host or distribute malicious web content (via a website, email attachment, or local file) that, when opened in Safari or processed by WebKit on any affected Apple device, triggers uncontrolled memory allocation. This causes the browser or application processing the content to exhaust available memory and crash, resulting in temporary denial-of-service to the user. The local attack vector means the attacker must either have local file access or convince the user to visit a malicious website, making opportunistic mass exploitation unlikely compared to remote network vulnerabilities.

This Month Plan within 30 days. Why: MEDIUM severity (CVSS 4.0-6.9).

Patch available 0.0% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

AnalysisAIv1 – Apr 02, 2026

Denial-of-service vulnerability in Apple's WebKit engine affects Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS through improper memory handling during web content processing. Local attackers without authentication can trigger this vulnerability via crafted web content to cause application crashes. Vendor-released patches are available across all affected platforms; EPSS score of 0.02% indicates minimal real-world exploitation likelihood despite the moderate CVSS 6.2 rating.

RemediationAI

Vendor-released patches are available: update Safari to version 18.6 or later, update iOS to 18.6 or later, update iPadOS to 18.6 or later (or 17.7.9 for devices not eligible for version 18), update macOS Sequoia to 15.6 or later, update tvOS to 18.6 or later, update visionOS to 2.6 or later, and update watchOS to 11.6 or later. Given that this is a local memory handling issue affecting web content rendering, no workarounds are available other than avoiding untrusted web content. All remediation steps and advisory links are available from Apple's official support pages referenced above.

Affects your stack

Find out whether the stacks and servers you run are on an affected version.

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Sign in to check

Technical ContextAI · show details

This vulnerability resides in Apple's WebKit rendering engine, which processes HTML, CSS, and JavaScript content across all Apple platforms. The root cause is classified as CWE-770 (Allocation of Resources Without Limits or Throttling), indicating that memory allocation is insufficiently constrained during web content rendering. An attacker can craft malicious web content that triggers excessive or uncontrolled memory allocation, leading to resource exhaustion and denial-of-service. The local attack vector (AV:L) and low complexity (AC:L) indicate the vulnerability requires local access or interaction with local web content, rather than remote network exploitation.

Know when Safari gets its next vulnerability

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

NVD PRIMARY 6.2 MEDIUM

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SUSE MEDIUM

Red Hat 6.5 MEDIUM

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

2

Patch released

Apr 06, 2026 - 08:30 nvd

Patch available

CVE Published

Jul 30, 2025 - 00:15 nvd

MEDIUM 6.2

DescriptionCVE.org

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing web content may lead to a denial-of-service.

Threat Intelligence Overview

EPSS Score

0.0%

Top 95% exploitable

Data Quality

3 sources

Confidence: Low

CVE.org

EPSS Vendor

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity MEDIUM

CISA KEV No

Public POC No

EPSS 0.0%

Patch available Yes

Active threat No

Deciding rule

MEDIUM severity (CVSS 4.0-6.9)

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived

Defer

Exploitation· derived

None

System Exposure· derived

Small

Automatable· derived

No

Human Impact· derived

Medium

Priority Score

31

Low Medium High Critical

KEV: 0

EPSS: 0

CVSS: +31

PoC: 0

Weaponized: 0

Threat intel: 0

Gov advisory: 0

Attack Technique

Memory Corruption HIGH

Memory corruption occurs when a program writes data beyond the boundaries of allocated memory regions or accesses memory in unintended ways, violating the integrity of the process's address space.

Denial of Service MEDIUM

Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.

Affected Products (CPE)CVE.org

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*

cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

More in Safari

View all

CVE-2017-2547 HIGH Act Now POC

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploi

CVE-2014-1303 CRITICAL Emergency POC

Heap-based buffer overflow in Apple Safari 7.0.2 allows remote attackers to execute arbitrary code and bypass a sandbox

CVE-2016-4622 HIGH Act Now

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrar

CVE-2015-1155 MEDIUM This Month POC

The history implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allo

CVE-2015-1126 MEDIUM This Month POC

WebKit, as used in Apple iOS before 8.3 and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, does not

CVE-2017-2446 HIGH Act Now POC

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploi

CVE-2017-13802 HIGH Act Now POC

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploi

CVE-2017-13795 HIGH Act Now POC

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploi

CVE-2017-13794 HIGH Act Now POC

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploi

CVE-2017-13792 HIGH Act Now POC

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploi

CVE-2017-13785 HIGH Act Now POC

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploi

CVE-2017-13784 HIGH Act Now POC

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploi

Same weakness CWE-770 – Allocation of Resources Without Limits or Throttling

View all

CVE-2017-8779 HIGH POC

CVE-2025-53521 CRITICAL POC

CVE-2024-28182 MEDIUM

CVE-2023-2650 MEDIUM

CVE-2017-5850 HIGH POC

CVE-2025-26682 HIGH

CVE-2022-32206 MEDIUM POC

CVE-2023-24998 HIGH

Same technique Denial Of Service

View all

CVE-2015-5119 CRITICAL POC

CVE-2011-2462 CRITICAL POC

CVE-2011-0611 HIGH POC

CVE-2012-1889 HIGH POC

CVE-2012-0507 CRITICAL POC

CVE-2014-1761 HIGH POC

CVE-2015-5122 CRITICAL POC

CVE-2011-0609 HIGH POC

Vendor StatusVendor

SUSE

Severity: Medium

Product	Status
SUSE Enterprise Storage 7.1	Fixed
SUSE Liberty Linux 8	Fixed
SUSE Liberty Linux 9	Fixed
SUSE Linux Enterprise Desktop 15 SP6 SUSE Linux Enterprise High Performance Computing 15 SP6 SUSE Linux Enterprise Server 15 SP6 SUSE Linux Enterprise Server for SAP Applications 15 SP6	Fixed
SUSE Linux Enterprise Desktop 15 SP7 SUSE Linux Enterprise High Performance Computing 15 SP7 SUSE Linux Enterprise Server 15 SP7 SUSE Linux Enterprise Server for SAP Applications 15 SP7	Fixed

References

Advisories & patches

ADVISORY https://access.redhat.com/errata/RHSA-2025:13780 ADVISORY https://access.redhat.com/errata/RHSA-2025:13782 ADVISORY https://access.redhat.com/errata/RHSA-2025:14421 ADVISORY https://access.redhat.com/errata/RHSA-2025:14422 ADVISORY https://access.redhat.com/errata/RHSA-2025:14423 ADVISORY https://access.redhat.com/errata/RHSA-2025:14432 ADVISORY https://access.redhat.com/errata/RHSA-2025:14433 ADVISORY https://access.redhat.com/errata/RHSA-2025:14434 ADVISORY https://access.redhat.com/errata/RHSA-2025:14486 ADVISORY https://access.redhat.com/errata/RHSA-2025:15729 ADVISORY https://support.apple.com/en-us/124147 ADVISORY https://support.apple.com/en-us/124148 ADVISORY https://support.apple.com/en-us/124149 ADVISORY https://support.apple.com/en-us/124152 ADVISORY https://support.apple.com/en-us/124153 ADVISORY https://support.apple.com/en-us/124154 ADVISORY https://support.apple.com/en-us/124155 ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:02765/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:02766/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:02777/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:02973/ REF http://seclists.org/fulldisclosure/2025/Aug/0 REF http://seclists.org/fulldisclosure/2025/Jul/31 REF http://seclists.org/fulldisclosure/2025/Jul/32 REF http://seclists.org/fulldisclosure/2025/Jul/36 REF http://www.openwall.com/lists/oss-security/2025/08/02/1 REF https://lists.debian.org/debian-lts-announce/2025/08/msg00015.html

Search Externally

Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy