CVE Watch15 jul 2026

CVE-2025-31277

Apple Multiple Products Buffer Overflow Vulnerability

CVSS

8.8

Alto

EPSS

1.5%

p71

KEV

SÍ

20 mar 2026

Exploit Today

0-100

Publicado: 30 jul 2025 · Última mod.: 15 jul 2026 · CWE-119 · CWE-120

EPSS · 30d

1.5%EPSS · 30 días1.5%

2026-06-302026-07-16

Ficha del catálogo KEV

Producto

Apple / Multiple Products

Vulnerabilidad

Apple Multiple Products Buffer Overflow Vulnerability

Añadido a KEV

20 mar 2026

Remediar antes de

3 abr 2026

Uso conocido en ransomware

Descripción resumida

Apple Safari, iOS, watchOS, visionOS, iPadOS, macOS, and tvOS contain a buffer overflow vulnerability that could allow the processing of maliciously crafted web content which may lead to memory corruption.

Acción requerida

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://support.apple.com/en-us/124147 ; https://support.apple.com/en-us/124149 ; https://support.apple.com/en-us/124152 ; https://support.apple.com/en-us/124153 ; https://support.apple.com/en-us/124155 ; https://nvd.nist.gov/vuln/detail/CVE-2025-31277

Descripción técnica

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2021-30860—

99.5%

KEV—80Apple Multiple Products Integer Overflow Vulnerability—CVE-2023-32434—

98.8%

KEV—80Apple Multiple Products Integer Overflow Vulnerability—CVE-2023-41993—

98.0%

KEV—79Apple Multiple Products WebKit Code Execution Vulnerability—CVE-2021-30807—

97.9%

KEV—79Apple Multiple Products Memory Corruption Vulnerability—CVE-2023-28205—

97.8%

KEV—79Apple Multiple Products WebKit Use-After-Free Vulnerability—CVE-2023-32439—

97.6%

KEV—79Apple Multiple Products WebKit Type Confusion Vulnerability—