CVE-2025-30427 Details
Description
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected Safari crash.
A use-after-free vulnerability has been identified in the WebKit component used by Safari. This issue allows maliciously crafted web content to be processed in a way that causes an unexpected crash of the Safari browser. The vulnerability arises from improper memory management, which can be exploited by manipulating how web content is handled.
Users can update to the latest versions of iOS, iPadOS, macOS Sequoia, tvOS, and Safari to address this vulnerability. Specific update instructions can be found on the Apple Support website.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Apr 1, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-416 | Use After Free | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| apple safari | < 18.4 |
CPE
Remediation
| |
| apple ipados | < 17.7.6 >= 18.0, < 18.4 |
CPE
Remediation
| |
| apple iphone os | < 18.4 |
CPE
Remediation
| |
| apple macos | >= 15.0, < 15.4 |
CPE
Remediation
| |
| apple tvos | < 18.4 |
CPE
Remediation
| |
| apple visionos | < 2.4 |
CPE
Remediation
| |
Change History
10 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 2, 2026 | CVE Modified | [email protected] |
| Nov 3, 2025 | CVE Modified | CVE |
| Nov 3, 2025 | CVE Modified | CVE |
| Apr 7, 2025 | Initial Analysis | [email protected] |
| Apr 1, 2025 | CVE Modified | CISA-ADP |
| Apr 1, 2025 | CVE Modified | CISA-ADP |
| Apr 1, 2025 | CVE Modified | CISA-ADP |
| Mar 31, 2025 | New CVE Received | [email protected] |