6.5

CVE-2025-24158

The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.3, Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. Processing web content may lead to a denial-of-service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ Safari Version < 18.3
Apple ≫ iPadOS Version < 18.3
Apple ≫ iPhone OS Version < 18.3
Apple ≫ macOS Version < 15.3
Apple ≫ tvOS Version < 18.3
Apple ≫ visionOS Version < 2.3
Apple ≫ watchOS Version < 11.3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.38% 0.797
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

https://support.apple.com/en-us/122066
Vendor Advisory
Release Notes
https://support.apple.com/en-us/122068
Vendor Advisory
Release Notes
https://support.apple.com/en-us/122071
Vendor Advisory
Release Notes
https://support.apple.com/en-us/122072
Vendor Advisory
Release Notes
https://support.apple.com/en-us/122073
Vendor Advisory
Release Notes
https://support.apple.com/en-us/122074
Vendor Advisory
Release Notes