---
id: "CVE-2025-24201"
kind: "vulnerability"
aliases: ["CVE-2025-24201"]
title: "An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions"
severity: "critical"
cvss: 10.0
epss: null
exploited: true
status: "open"
category: "vendor"
products: [{"name": "Apple Multiple Products", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "apple safari", "fixed": ["18.3.1"], "affected": "< 18.3.1", "ecosystem": "vendor"}, {"name": "apple macos", "fixed": ["15.3.2"], "affected": ">= 15.0, < 15.3.2", "ecosystem": "vendor"}, {"name": "apple visionos", "fixed": ["2.3.2"], "affected": "< 2.3.2", "ecosystem": "vendor"}, {"name": "apple watchos", "fixed": ["11.4"], "affected": "< 11.4", "ecosystem": "vendor"}, {"name": "apple ipados", "fixed": ["15.8.4"], "affected": ">= 15.8, < 15.8.4", "ecosystem": "vendor"}, {"name": "apple ipados", "fixed": ["16.7.11"], "affected": ">= 16.7, < 16.7.11", "ecosystem": "vendor"}, {"name": "apple ipados", "fixed": ["17.7.6"], "affected": ">= 17.0, < 17.7.6", "ecosystem": "vendor"}, {"name": "apple ipados", "fixed": ["18.3.2"], "affected": ">= 18.0, < 18.3.2", "ecosystem": "vendor"}, {"name": "apple iphone os", "fixed": ["15.8.4"], "affected": ">= 15.8, < 15.8.4", "ecosystem": "vendor"}, {"name": "apple iphone os", "fixed": ["16.7.11"], "affected": ">= 16.7, < 16.7.11", "ecosystem": "vendor"}, {"name": "apple iphone os", "fixed": ["18.3.2"], "affected": ">= 17.0, < 18.3.2", "ecosystem": "vendor"}, {"name": "debian linux", "fixed": [], "affected": "= 11.0", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["apple", "exploited", "ios", "ipados", "macos", "safari", "vendor", "webkit"]
not_affected_if: ["unpatched-versions-only-if-already-updated"]
published_at: "2025-03-11T18:15:30+00:00"
first_seen_at: "2026-10-23T19:11:51+00:00"
updated_at: "2026-10-23T22:29:05+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24201", "first_seen_at": "2026-10-23T19:11:51+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24201", "first_seen_at": "2026-10-23T22:29:05+00:00"}]
---

# An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions

Apple's WebKit browser engine has an out-of-bounds write that lets malicious web content escape the Web Content sandbox. Attackers are exploiting it in the wild, per CISA's Known Exploited Vulnerabilities catalog.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Apple Multiple Products affected ? fixed ?
- vendor:apple safari affected < 18.3.1 fixed 18.3.1
- vendor:apple macos affected >= 15.0, < 15.3.2 fixed 15.3.2
- vendor:apple visionos affected < 2.3.2 fixed 2.3.2
- vendor:apple watchos affected < 11.4 fixed 11.4
- vendor:apple ipados affected >= 15.8, < 15.8.4 fixed 15.8.4
- vendor:apple ipados affected >= 16.7, < 16.7.11 fixed 16.7.11
- vendor:apple ipados affected >= 17.0, < 17.7.6 fixed 17.7.6
- vendor:apple ipados affected >= 18.0, < 18.3.2 fixed 18.3.2
- vendor:apple iphone os affected >= 15.8, < 15.8.4 fixed 15.8.4
- vendor:apple iphone os affected >= 16.7, < 16.7.11 fixed 16.7.11
- vendor:apple iphone os affected >= 17.0, < 18.3.2 fixed 18.3.2
- vendor:debian linux affected = 11.0 fixed ?

## How to check

Check the installed iOS, iPadOS, macOS, or Safari version against Apple's security notes for the patch that fixes CVE-2025-24201; sources do not give a version check command.

## Fix

Update Apple devices to the patched OS and Safari releases listed in Apple's security advisory for CVE-2025-24201; for non-Apple apps that embed WebKit, update to a WebKit build that includes the fix.

## Timeline

- 2026-10-23T19:11:51+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24201
- 2026-10-23T22:29:05+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2025-24201

## From the sources

An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.2 and iPadOS 18.3.2, iPadOS 17.7.6, macOS Sequoia 15.3.2, visionOS 2.3.2, watchOS 11.4. Maliciously crafted web content may be able to break out of Web Content sandbox. This is a supplementary fix for an attack that was blocked in iOS 17.2. (Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.).

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_