CVE-2025-31277: Apple Multiple Products memory corruption in web content processing

CVE-2025-31277 · Severity: critical · CVSS 8.8 · Exploited in the wild · Published 2025-07-30

A memory handling vulnerability exists in several Apple operating systems and the Safari web browser. An attacker could exploit this by tricking a user into visiting a malicious website or viewing specially crafted web content. Successful exploitation could allow an attacker to compromise the device, potentially leading to unauthorized access to data or system instability.

Technologies: Apple iPadOS, Apple macOS, Apple Multiple Products, Apple watchOS. Vendors: Apple.

Quick answers

Is CVE-2025-31277 exploited in the wild?
Yes. CVE-2025-31277 is known to be exploited in the wild, first recorded on 20 March 2026. Treat it as urgent.
How severe is CVE-2025-31277?
Critical severity, with a CVSS score of 8.8, published 30 July 2025.
Which products and versions are affected?
Apple iPadOS < 18.6, before 18.6; Apple watchOS < 11.6, before 11.6.
Is there a fix for CVE-2025-31277?
A patch was published on 2025-07-30: Fixes released in various Apple OS updates. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2025-31277 attacked?
It is attacked over the network, in an operating system.
Am I affected by CVE-2025-31277?
Check whether you run Apple iPadOS, Apple macOS, Apple Multiple Products or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A memory corruption vulnerability, specifically identified as a buffer overflow (CWE-119/CWE-120), exists in Apple's web content processing components. The issue stems from improper memory handling when parsing maliciously crafted web content. An unauthenticated remote attacker can exploit this by enticing a user to visit a malicious webpage (User Interaction required). Successful exploitation may lead to arbitrary code execution or memory corruption on the target device. Apple has addressed this issue by improving memory handling in Safari 18.6, iOS 18.6, iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, and watchOS 11.6.

Affected products

  • Apple Safari before 18.6
  • Apple iOS before 18.6
  • Apple iPadOS before 18.6
  • Apple macOS Sequoia before 15.6
  • Apple tvOS before 18.6
  • Apple visionOS before 2.6
  • Apple watchOS before 11.6

Timeline

  • 2025-07-30: advisory: Initial disclosure by Apple and NVD.
  • 2025-07-30: patched: Fixes released in various Apple OS updates.

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.