Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2025-24201

An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.2 and iPadOS 18.3.2, iPadOS 17.7.6, macOS Sequoia 15.3.2, visionOS 2.3.2, watchOS 11.4. Maliciously crafted web content may be able to break out of Web Content sandbox. This is a supplementary fix for an attack that was blocked in iOS 17.2. (Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.).

CVSS 10.0 · CriticalBuzz score 61.0KEV listed

Buzz score

Why this CVE is surfacing

Buzz score total 61.0

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 23.0 · diversity 13.0 · KEV 25.0 · OTX 0.0 · PoC 0.0
Mention score
23.0
9 evidence mentions in the snapshot
Diversity score
13.0
4 sources across 2 categories
KEV score
25.0
Known exploited vulnerability present
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
9 source links · newest first
  • Mobile Attack Surface Expands as Enterprises Lose ControlSecurityWeek

    Shadow AI embedded in everyday apps, combined with outdated mobile devices and zero-click exploits, is creating a new and largely unseen mobile risk.

    newswww.securityweek.comApr 3, 2026, 11:00 AM
  • Apple addressed the seventh actively exploited zero-daySecurity Affairs

    Apple addressed a vulnerability impacting iOS, iPadOS, and macOS that it is under active exploitation in the wild. Apple addressed an actively exploited zero-day, tracked as CVE-2025-43300, in iOS, iPadOS, and macOS. The vulnerability is zero-day out-of-bounds write issue that resides in the ImageIO framework, an attacker could exploit it to cause memory corruption when processing […]

    newssecurityaffairs.comAug 21, 2025, 4:54 PM
  • 7th April – Threat Intelligence ReportCheck Point Research

    For the latest discoveries in cyber research for the week of 7th April, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES The second-largest bar association in the US, The State Bar of Texas, has experienced a ransomware attack that resulted in unauthorized access to its network, exposing sensitive member information including full names […]

    vendorresearch.checkpoint.comApr 7, 2025, 12:02 PM
  • Apple backported fixes for three actively exploited flaws to older devicesSecurity Affairs

    Apple backports three critical vulnerabilities actively exploited in attacks against older iOS and macOS models. Apple has backported fixes for three actively exploited vulnerabilities to older devices and OS versions. The three vulnerabilities are: Apple released the following updates: that are available for the following devices: Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini (SecurityAffairs – hacking, newsletter)

    newssecurityaffairs.comApr 2, 2025, 8:52 AM
  • Apple Patches Recent Zero-Days in Older iPhonesSecurityWeek

    Apple has released a hefty round of security updates for its desktop and mobile products, patching two recent zero-days in older iPhone models.

    newswww.securityweek.comApr 1, 2025, 10:30 AM
  • U.S. CISA adds Apple products and Juniper Junos OS flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs

    U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apple products and Juniper Junos OS flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: The vulnerability CVE-2025-21590 is an Improper Isolation or Compartmentalization issue in the kernel of Juniper Networks Junos OS […]

    newssecurityaffairs.comMar 14, 2025, 12:02 AM
  • Update your iPhone now: Apple patches vulnerability used in “extremely sophisticated attacks”Malwarebytes Labs

    Apple has patched a vulnerability in iOS and iPadOS that was under active exploitation in extremely sophisticated attacks.

    newswww.malwarebytes.comMar 12, 2025, 5:07 PM
  • Apple fixed the third actively exploited zero-day of 2025Security Affairs

    Apple addressed a zero-day vulnerability, tracked as CVE-2025-24201, that has been exploited in “extremely sophisticated” cyber attacks. Apple has released emergency security updates to address a zero-day vulnerability, tracked as CVE-2025-24201, in the WebKit cross-platform web browser engine. The vulnerability is an out-of-bounds write issue that was exploited in “extremely sophisticated” attacks. An attacker can […]

    newssecurityaffairs.comMar 11, 2025, 10:48 PM
  • Apple Ships iOS 18.3.2 to Fix Already-Exploited WebKit FlawSecurityWeek

    Apple warns that the WebKIt bug “may have been exploited in an extremely sophisticated attack against specific targeted individuals.”

    newswww.securityweek.comMar 11, 2025, 7:11 PM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence