vulnerability

Red Hat: CVE-2025-24223: webkitgtk: Processing maliciously crafted web content may lead to memory corruption (Multiple Advisories)

Name: Red Hat: CVE-2025-24223: webkitgtk: Processing maliciously crafted web content may lead to memory corruption (Multiple Advisories)
Creator: Red Hat
Published: 2025-05-12T00:00:00.000Z
Keywords: CVE, CWE-352, Red Hat, 2025, 24223, webkitgtk, no-fix-redhat-rpm-package, redhat-upgrade-webkitgtk4, redhat-upgrade-webkitgtk4-debuginfo, redhat-upgrade-webkitgtk4-devel, redhat-upgrade-webkitgtk4-doc, redhat-upgrade-webkitgtk4-jsc, redhat-upgrade-webkitgtk4-jsc-devel, Severity 9

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:C/I:C/A:C)

Published

May 12, 2025

Added

Jul 9, 2025

Modified

Jun 17, 2026

Description

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to memory corruption.

Solutions

no-fix-redhat-rpm-packageredhat-upgrade-webkitgtk4redhat-upgrade-webkitgtk4-debuginforedhat-upgrade-webkitgtk4-develredhat-upgrade-webkitgtk4-docredhat-upgrade-webkitgtk4-jscredhat-upgrade-webkitgtk4-jsc-devel

References

CWE-352
EUVD-EUVD-2025-14860
NVD-CVE-2025-24223
REDHAT-RHSA-2025:10364
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-14860

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report