CVE-2025-31277
high CISA KEVApple Multiple Products Buffer Overflow Vulnerability
Vendor / product: Apple — Multiple Products
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.
CVSS
8.8
8.8 (CVSS v3.1)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Severity source: NVD CVSS v3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
Timeline (UTC)
Published: 2025-07-30 00:15
Modified: 2026-09-21 17:17
NVD status: Analyzed
Last synced 1 day ago
Verified against the source API 2026-10-27 07:07 UTC
Exploitation
Listed in CISA KEV
Added 2026-03-20 · due 2026-04-03
Known ransomware use: Unknown
Required action (CISA)
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Affected products
apple / safari <18.6
apple / ipados <18.6
apple / iphone_os <18.6
apple / macos ≥15.0 <15.6
apple / tvos <18.6
apple / visionos <2.6
apple / watchos <11.6
webkitgtk / webkitgtk <2.50.0
wpewebkit / wpe_webkit <2.50.0
redhat / enterprise_linux 6.0, 7.0, 8.0, 9.0
redhat / enterprise_linux_aus 8.2, 8.4, 8.6
redhat / enterprise_linux_els 7.0
redhat / enterprise_linux_eus 8.4, 8.6, 9.4
redhat / enterprise_linux_tus 8.6, 8.8
redhat / enterprise_linux_update_services_for_sap_solutions 8.6, 8.8, 9.0, 9.2
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
Vendor advisory: https://support.apple.com/en-us/124147
Vendor advisory: https://support.apple.com/en-us/124149
Vendor advisory: https://support.apple.com/en-us/124152
Vendor advisory: https://support.apple.com/en-us/124153
Vendor advisory: https://support.apple.com/en-us/124154
Vendor advisory: https://support.apple.com/en-us/124155
References
- https://support.apple.com/en-us/124147 product-security@apple.com
- https://support.apple.com/en-us/124149 product-security@apple.com
- https://support.apple.com/en-us/124152 product-security@apple.com
- https://support.apple.com/en-us/124153 product-security@apple.com
- https://support.apple.com/en-us/124154 product-security@apple.com
- https://support.apple.com/en-us/124155 product-security@apple.com
- http://seclists.org/fulldisclosure/2025/Aug/0 af854a3a-2127-422b-91ae-364da2661108
- http://seclists.org/fulldisclosure/2025/Jul/30 af854a3a-2127-422b-91ae-364da2661108
- http://seclists.org/fulldisclosure/2025/Jul/32 af854a3a-2127-422b-91ae-364da2661108
- http://seclists.org/fulldisclosure/2025/Jul/36 af854a3a-2127-422b-91ae-364da2661108
- https://access.redhat.com/errata/RHSA-2025:17643 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
- https://access.redhat.com/errata/RHSA-2025:17741 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
- https://access.redhat.com/errata/RHSA-2025:17743 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
- https://access.redhat.com/errata/RHSA-2025:17802 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
- https://access.redhat.com/errata/RHSA-2025:17807 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
- https://access.redhat.com/errata/RHSA-2025:18097 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
- https://access.redhat.com/errata/RHSA-2025:19109 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
- https://access.redhat.com/errata/RHSA-2025:19157 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
- https://access.redhat.com/errata/RHSA-2025:19165 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
- https://access.redhat.com/errata/RHSA-2025:19352 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
- https://access.redhat.com/security/cve/CVE-2025-31277 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
- https://bugzilla.redhat.com/show_bug.cgi?id=2448780 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
- https://cloud.google.com/blog/topics/threat-intelligence/darksword-ios-exploit-chain/ 134c704f-9b21-4f2e-91b3-4a467353bcc0
- https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-31277.json 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-31277 134c704f-9b21-4f2e-91b3-4a467353bcc0
Data sources
CISA KEV — fetched 2026-10-27 06:50 UTC · record ↗
NVD CVE API 2.0 — fetched 2026-10-27 07:07 UTC · record ↗