Safari 18.5 WebKit Multiple CVEs Fix Advisory

Critical Vulnerability Information Safari 18.5 (Release Date: May 12, 2023) WebKit - CVE-2025-24213: - Impact: Type confusion issue could lead to memory corruption. - Description: Resolved by improving floating-point number handling. - WebKit Bugzilla: 286904 - Reporter: Google V8 Security Team - CVE-2025-31223: - Impact: Processing maliciously crafted web content could lead to memory corruption. - Description: Resolved by improving checks. - WebKit Bugzilla: 289387, 289653 - Reporter: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs - CVE-2025-31238: - Impact: Issue resolved in collaboration with Trend Micro Zero Day Initiative. - WebKit Bugzilla: Not provided - CVE-2025-24223: - Impact: Processing maliciously crafted web content could lead to memory corruption. - Description: Resolved by improving memory handling. - WebKit Bugzilla: 287577 - Reporter: meza (@ginggiiBesei) and an anonymous researcher - CVE-2025-31204: - Impact: Same as above. - WebKit Bugzilla: 291506 - Reporter: Nan Wang (@eternalsakura13) - CVE-2025-31217: - Impact: Processing maliciously crafted web content could lead to unexpected Safari crashes. - Description: Resolved by improving input validation. - WebKit Bugzilla: 289677 - Reporter: Ignacio Sanmillan (@ulexec) - CVE-2025-31215: - Impact: Processing maliciously crafted web content could lead to unexpected process crashes. - Description: Resolved by improving checks. - WebKit Bugzilla: 288814 - Reporter: Jiming Wang and Jikai Ren - CVE-2025-31206: - Impact: Processing maliciously crafted web content could lead to unexpected Safari crashes. - Description: Resolved type confusion issue by improving state handling. - WebKit Bugzilla: 290834 - Reporter: An anonymous researcher - CVE-2025-31205: - Impact: Malicious websites could potentially steal data across origins. - Description: Resolved by improving checks. - WebKit Bugzilla: 290992 - Reporter: Ivan Fratric of Google Project Zero - CVE-2025-31257: - Impact: Processing maliciously crafted web content could lead to unexpected Safari crashes. - Description: Resolved by improving memory handling. - WebKit Bugzilla: 290985 - Reporter: Juergen Schmied of Lynck GmbH

Goal Reached Thanks to every supporter — we hit 100%!

Safari 18.5 WebKit Multiple CVEs Fix Advisory