Apple Multiple Products Use-After-Free WebKit Vulnerability

zetlyn/cve-kev vulnerability cve CVE-2025-43529 known 2025-12-15

Properties

cwes	CWE-416 receipt Source CISA Known Exploited Vulnerabilities Its words `CWE-416` Read by `field:cwes` Said since 2026-09-28 11:44 UTC Last answered 2026-10-04 20:16 UTC What the source handed over { "cveID": "CVE-2025-43529", "cwes": "CWE-416", "dateAdded": "2025-12-15", "dueDate": "2026-01-05", "forensicTriage": "No", "knownRansomwareCampaignUse": "Unknown", "notes": "https://support.apple.com/en-us/125884 ; https://support.apple.com/en-us/125892 ; https://support.apple.com/en-us/125885 ; https://support.apple.com/en-us/125886 ; https://support.apple.com/en-us/125889 ; https://nvd.nist.gov/vuln/detail/CVE-2025-43529", "product": "Multiple Products", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "shortDescription": "Apple iOS, iPadOS, macOS, and other Apple products contain a use-after-free vulnerability in WebKit. Processing maliciously crafted web content may lead to memory corruption. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.", "vendorProject": "Apple", "vulnerabilityName": "Apple Multiple Products Use-After-Free WebKit Vulnerability" }
due_date	2026-01-05 receipt Source CISA Known Exploited Vulnerabilities Its words `2026-01-05` Read by `field:dueDate` Said since 2026-09-28 11:44 UTC Last answered 2026-10-04 20:16 UTC What the source handed over { "cveID": "CVE-2025-43529", "cwes": "CWE-416", "dateAdded": "2025-12-15", "dueDate": "2026-01-05", "forensicTriage": "No", "knownRansomwareCampaignUse": "Unknown", "notes": "https://support.apple.com/en-us/125884 ; https://support.apple.com/en-us/125892 ; https://support.apple.com/en-us/125885 ; https://support.apple.com/en-us/125886 ; https://support.apple.com/en-us/125889 ; https://nvd.nist.gov/vuln/detail/CVE-2025-43529", "product": "Multiple Products", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "shortDescription": "Apple iOS, iPadOS, macOS, and other Apple products contain a use-after-free vulnerability in WebKit. Processing maliciously crafted web content may lead to memory corruption. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.", "vendorProject": "Apple", "vulnerabilityName": "Apple Multiple Products Use-After-Free WebKit Vulnerability" }
exploited	yes receipt Source CISA Known Exploited Vulnerabilities Its words `yes` Read by `const:yes` Said since 2026-09-28 11:44 UTC Last answered 2026-10-04 20:16 UTC What the source handed over { "cveID": "CVE-2025-43529", "cwes": "CWE-416", "dateAdded": "2025-12-15", "dueDate": "2026-01-05", "forensicTriage": "No", "knownRansomwareCampaignUse": "Unknown", "notes": "https://support.apple.com/en-us/125884 ; https://support.apple.com/en-us/125892 ; https://support.apple.com/en-us/125885 ; https://support.apple.com/en-us/125886 ; https://support.apple.com/en-us/125889 ; https://nvd.nist.gov/vuln/detail/CVE-2025-43529", "product": "Multiple Products", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "shortDescription": "Apple iOS, iPadOS, macOS, and other Apple products contain a use-after-free vulnerability in WebKit. Processing maliciously crafted web content may lead to memory corruption. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.", "vendorProject": "Apple", "vulnerabilityName": "Apple Multiple Products Use-After-Free WebKit Vulnerability" }
forensic_triage	false receipt Source CISA Known Exploited Vulnerabilities Its words `No` Read by `field:forensicTriage` Said since 2026-09-28 11:44 UTC Last answered 2026-10-04 20:16 UTC What the source handed over { "cveID": "CVE-2025-43529", "cwes": "CWE-416", "dateAdded": "2025-12-15", "dueDate": "2026-01-05", "forensicTriage": "No", "knownRansomwareCampaignUse": "Unknown", "notes": "https://support.apple.com/en-us/125884 ; https://support.apple.com/en-us/125892 ; https://support.apple.com/en-us/125885 ; https://support.apple.com/en-us/125886 ; https://support.apple.com/en-us/125889 ; https://nvd.nist.gov/vuln/detail/CVE-2025-43529", "product": "Multiple Products", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "shortDescription": "Apple iOS, iPadOS, macOS, and other Apple products contain a use-after-free vulnerability in WebKit. Processing maliciously crafted web content may lead to memory corruption. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.", "vendorProject": "Apple", "vulnerabilityName": "Apple Multiple Products Use-After-Free WebKit Vulnerability" }
known_ransomware_campaign_use	Unknown receipt Source CISA Known Exploited Vulnerabilities Its words `Unknown` Read by `field:knownRansomwareCampaignUse` Said since 2026-09-28 11:44 UTC Last answered 2026-10-04 20:16 UTC What the source handed over { "cveID": "CVE-2025-43529", "cwes": "CWE-416", "dateAdded": "2025-12-15", "dueDate": "2026-01-05", "forensicTriage": "No", "knownRansomwareCampaignUse": "Unknown", "notes": "https://support.apple.com/en-us/125884 ; https://support.apple.com/en-us/125892 ; https://support.apple.com/en-us/125885 ; https://support.apple.com/en-us/125886 ; https://support.apple.com/en-us/125889 ; https://nvd.nist.gov/vuln/detail/CVE-2025-43529", "product": "Multiple Products", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "shortDescription": "Apple iOS, iPadOS, macOS, and other Apple products contain a use-after-free vulnerability in WebKit. Processing maliciously crafted web content may lead to memory corruption. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.", "vendorProject": "Apple", "vulnerabilityName": "Apple Multiple Products Use-After-Free WebKit Vulnerability" }
product	Multiple Products receipt Source CISA Known Exploited Vulnerabilities Its words `Multiple Products` Read by `field:product` Said since 2026-09-28 11:44 UTC Last answered 2026-10-04 20:16 UTC What the source handed over { "cveID": "CVE-2025-43529", "cwes": "CWE-416", "dateAdded": "2025-12-15", "dueDate": "2026-01-05", "forensicTriage": "No", "knownRansomwareCampaignUse": "Unknown", "notes": "https://support.apple.com/en-us/125884 ; https://support.apple.com/en-us/125892 ; https://support.apple.com/en-us/125885 ; https://support.apple.com/en-us/125886 ; https://support.apple.com/en-us/125889 ; https://nvd.nist.gov/vuln/detail/CVE-2025-43529", "product": "Multiple Products", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "shortDescription": "Apple iOS, iPadOS, macOS, and other Apple products contain a use-after-free vulnerability in WebKit. Processing maliciously crafted web content may lead to memory corruption. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.", "vendorProject": "Apple", "vulnerabilityName": "Apple Multiple Products Use-After-Free WebKit Vulnerability" }
vendor_project	Apple receipt Source CISA Known Exploited Vulnerabilities Its words `Apple` Read by `field:vendorProject` Said since 2026-09-28 11:44 UTC Last answered 2026-10-04 20:16 UTC What the source handed over { "cveID": "CVE-2025-43529", "cwes": "CWE-416", "dateAdded": "2025-12-15", "dueDate": "2026-01-05", "forensicTriage": "No", "knownRansomwareCampaignUse": "Unknown", "notes": "https://support.apple.com/en-us/125884 ; https://support.apple.com/en-us/125892 ; https://support.apple.com/en-us/125885 ; https://support.apple.com/en-us/125886 ; https://support.apple.com/en-us/125889 ; https://nvd.nist.gov/vuln/detail/CVE-2025-43529", "product": "Multiple Products", "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "shortDescription": "Apple iOS, iPadOS, macOS, and other Apple products contain a use-after-free vulnerability in WebKit. Processing maliciously crafted web content may lead to memory corruption. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.", "vendorProject": "Apple", "vulnerabilityName": "Apple Multiple Products Use-After-Free WebKit Vulnerability" }

Text

Apple Multiple Products Use-After-Free WebKit Vulnerability Apple iOS, iPadOS, macOS, and other Apple products contain a use-after-free vulnerability in WebKit. Processing maliciously crafted web content may lead to memory corruption. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. https://support.apple.com/en-us/125884 ; https://support.apple.com/en-us/125892 ; https://support.apple.com/en-us/125885 ; https://support.apple.com/en-us/125886 ; https://support.apple.com/en-us/125889 ; https://nvd.nist.gov/vuln/detail/CVE-2025-43529