cvedb.io
CVE-2025-31277
HIGH · CVSS 8.8 ⚠ KEV — EXPLOITED
EPSS exploitation probability: 70%
⚠ Listed in the CISA Known Exploited Vulnerabilities catalog — actively exploited.
Published 2026-03-20 · Last modified 2026-07-15T02:17:23.693

Summary

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.

Affected products

Apple — Multiple Products

Does this affect you?

Add your gear to cvedb and we'll alert you only when Apple ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.