vulnerability

Red Hat: CVE-2025-31206: webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (Multiple Advisories)

Name: Red Hat: CVE-2025-31206: webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (Multiple Advisories)
Creator: Red Hat
Published: 2025-05-12T00:00:00.000Z
Keywords: CVE, CWE-843, Red Hat, 2025, 31206, webkitgtk, no-fix-redhat-rpm-package, redhat-upgrade-webkitgtk4, redhat-upgrade-webkitgtk4-debuginfo, redhat-upgrade-webkitgtk4-devel, redhat-upgrade-webkitgtk4-doc, redhat-upgrade-webkitgtk4-jsc, redhat-upgrade-webkitgtk4-jsc-devel, Severity 9

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:C/I:C/A:C)

Published

May 12, 2025

Added

Jul 9, 2025

Modified

Jun 17, 2026

Description

A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Solutions

no-fix-redhat-rpm-packageredhat-upgrade-webkitgtk4redhat-upgrade-webkitgtk4-debuginforedhat-upgrade-webkitgtk4-develredhat-upgrade-webkitgtk4-docredhat-upgrade-webkitgtk4-jscredhat-upgrade-webkitgtk4-jsc-devel

References

CWE-843
EUVD-EUVD-2025-14628
NVD-CVE-2025-31206
REDHAT-RHSA-2025:10364
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-14628

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report