CVE-2025-31277 CISA KEV · Actively exploited
Memory buffer overflow in Apple Safari
CVSS score
8.8
EPSS probability
%1.7
Risk score
0.3
Published
1 y ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds
Cybersecurity researchers have identified a set of 13 malicious Composer theme packages on Packagist that are designed to inject JavaScript into Vietnamese movie and comic streaming sites that install those libraries and initiate the deployment of spyware aimed at unpatched iOS devices. "The injected code runs two operations against a site's visitors: a mobile ad-fraud and gambling-redirect
Similar Vulnerabilities
10.0
CVE-2021-44228 Actively exploitedImproper input validation in Apache Log4j
Patch verified Public Exploits:30EPSS %100
9.8
CVE-2012-4681 Actively exploitedVulnerability in N/a
Workaround Public Exploits:3EPSS %99
9.8
CVE-2012-1723 Actively exploitedVulnerability in N/a
Workaround Public Exploits:2EPSS %94
9.0
CVE-2021-40438 Actively exploitedmod_proxy SSRF
Patch verified Public Exploits:11EPSS %100
9.8
CVE-2017-12149 Actively exploitedDeserialization of untrusted data in Red Hat, Inc. Jbossas
Workaround Public Exploits:1EPSS %91
9.8
CVE-2016-8735 Actively exploitedVulnerability in Apache Tomcat
Partial patch Public Exploits:1EPSS %90
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-31277"