The vulnerability in the isolated environment of the Web Content module of the Web pages displayed by the Safari browser and the visionOS, iOS, iPadOS, macOS operating systems allows a hacker to execute arbitrary code.

🗓️ 12 Mar 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 7 Views

A vulnerability in Safari WebKit isolated web content allows out-of-bounds writes enabling arbitrary code execution.

Reporter	Title	Published	Views	Family All 284
GithubExploit	Exploit for Out-of-bounds Write in Apple Safari	11 Jul 202514:01	–	githubexploit
GithubExploit	Exploit for Use After Free in Apple Ipados	23 Aug 202505:08	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Apple Safari	30 Aug 202502:21	–	githubexploit
IBM Security Bulletins	Security Bulletin: An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions., affect watsonx.data	30 Jun 202510:25	–	ibm
ATTACKERKB	CVE-2025-24201	11 Mar 202500:00	–	attackerkb
Tenable Nessus	Amazon Linux 2 : webkitgtk4, --advisory ALAS2-2025-2869 (ALAS-2025-2869)	29 May 202500:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0046: webkit2gtk3 (ALINUX3-SA-2025:0046)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : webkit2gtk3 (ALSA-2025:2863)	19 Mar 202500:00	–	nessus
Tenable Nessus	AlmaLinux 9 : webkit2gtk3 (ALSA-2025:2864)	19 Mar 202500:00	–	nessus
Tenable Nessus	Apple iOS < 15.8.4 Multiple Vulnerabilities (122345)	31 Mar 202500:00	–	nessus

Vulners

Node

apple safariRange<18.3.1

OR

apple visionosRange<2.3.2

Source	Link
support	www.support.apple.com/en-us/122281
support	www.support.apple.com/en-us/122283
support	www.support.apple.com/en-us/122284
support	www.support.apple.com/en-us/122285
webkitgtk	www.webkitgtk.org/security/WSA-2025-0002.html
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0414SE17MD
wiki	www.wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0411SE18
wiki	www.wiki.astralinux.ru/astra-linux-se47-bulletin-2025-0422SE47
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.13/
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/3.1/

04 Mar 2026 00:00Current

8.2High risk

Vulners AI Score8.2

CVSS 38.8

CVSS 210

EPSS0.0424

Safari WebKit isolated web content out of bounds write arbitrary code execution VisionOS macOS