CVE-2025-24201
CRITICAL 10 KNOWN EXPLOITED PoC CATALOGUED ALL-YEARSAn out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.2 and iPadOS 18.3.2, iPadOS 17.7.6, macOS Sequoia 15.3.2, visionOS 2.3.2, watchOS 11.4. Maliciously crafted web content may be able to break out of Web Content sandbox. This is a supplementary fix for an attack that was blocked in iOS 17.2. (Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.).
ACTIVELY EXPLOITED
Confirmed exploited in the wild — in CISA KEV since 2025-03-13. Patch or mitigate now.
Exploitation likelihood
3.8%chance of exploitation in 30 days · 90th percentile
● In CISA KEV (2025-03-13)● Catalogued PoC◆ SSVC: exploitation active, automatable yes
Impact if exploited
10CVSS 3.1 · CRITICAL · ADP
- ConfidentialityHigh
- IntegrityHigh
- AvailabilityHigh
What an attacker needs
- ✓Access: Reachable over the network — no local access needed
- ✓Privileges: No account or privileges required
- ✓User interaction: No user interaction needed
- ✓Complexity: No special conditions — reliably repeatable
✓ lowers the bar for an attacker · ⚠ raises it
Proof of concept
Public PoC or exploit resources are catalogued below.
Listed by the named source; Vulnpedia has not tested these resources.
PoC data: JSON
Resource commands
curl -s https://vulnpedia.com/cve/CVE-2025-24201/poc.jsonMachine-readable PoC index for this CVE (for automation).Search for new PoCs
Search GitHub now — results may be empty or unverified.
Tracked sources are checked weekly for the full archive, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.
Data snapshot:
Affected
Products Safari Ios And Ipados Ipados Macos Visionos Watchos Iphone Os Debian Linux
Weakness (CWE)
- CWE-787: Out-of-bounds Write
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
References and research data (JSON)
Vendor product assessments
Showing 32 of 467 vendor product statements; 435 omitted. Read the full vendor advisory.
webkitgtk4-0:2.48.3-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_9?arch=s390x
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
- workaround: Systems which do not rely on a GUI for system administration (commonly referred to as "headless") should confirm that GNOME shell and WebKitGTK are not present on the system. WebKitGTK3 is no longer used and can therefore be uninstalled without consequence. WebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface.
webkit2gtk3-debuginfo-0:2.46.6-2.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_10?arch=ppc64le
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
- workaround: Systems which do not rely on a GUI for system administration (commonly referred to as "headless") should confirm that GNOME shell and WebKitGTK are not present on the system. WebKitGTK3 is no longer used and can therefore be uninstalled without consequence. WebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface.
webkit2gtk3-jsc-0:2.46.6-2.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_10?arch=s390x
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
- workaround: Systems which do not rely on a GUI for system administration (commonly referred to as "headless") should confirm that GNOME shell and WebKitGTK are not present on the system. WebKitGTK3 is no longer used and can therefore be uninstalled without consequence. WebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface.
webkit2gtk3-debuginfo-0:2.46.6-2.el8_2.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_2?arch=i686
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
- workaround: Systems which do not rely on a GUI for system administration (commonly referred to as "headless") should confirm that GNOME shell and WebKitGTK are not present on the system. WebKitGTK3 is no longer used and can therefore be uninstalled without consequence. WebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface.
webkit2gtk3-debugsource-0:2.46.6-2.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_4?arch=i686
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
- workaround: Systems which do not rely on a GUI for system administration (commonly referred to as "headless") should confirm that GNOME shell and WebKitGTK are not present on the system. WebKitGTK3 is no longer used and can therefore be uninstalled without consequence. WebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface.
webkit2gtk3-debugsource-0:2.46.6-2.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_4?arch=i686
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
- workaround: Systems which do not rely on a GUI for system administration (commonly referred to as "headless") should confirm that GNOME shell and WebKitGTK are not present on the system. WebKitGTK3 is no longer used and can therefore be uninstalled without consequence. WebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface.
webkit2gtk3-0:2.46.6-2.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream TUS (v.8.4) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_4?arch=i686
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
- workaround: Systems which do not rely on a GUI for system administration (commonly referred to as "headless") should confirm that GNOME shell and WebKitGTK are not present on the system. WebKitGTK3 is no longer used and can therefore be uninstalled without consequence. WebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface.
webkit2gtk3-0:2.46.6-2.el8_6.src as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_6?arch=src
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
- workaround: Systems which do not rely on a GUI for system administration (commonly referred to as "headless") should confirm that GNOME shell and WebKitGTK are not present on the system. WebKitGTK3 is no longer used and can therefore be uninstalled without consequence. WebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface.
webkit2gtk3-0:2.46.6-2.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_6?arch=s390x
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
- workaround: Systems which do not rely on a GUI for system administration (commonly referred to as "headless") should confirm that GNOME shell and WebKitGTK are not present on the system. WebKitGTK3 is no longer used and can therefore be uninstalled without consequence. WebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface.
webkit2gtk3-devel-debuginfo-0:2.46.6-2.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_6?arch=s390x
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
- workaround: Systems which do not rely on a GUI for system administration (commonly referred to as "headless") should confirm that GNOME shell and WebKitGTK are not present on the system. WebKitGTK3 is no longer used and can therefore be uninstalled without consequence. WebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface.
webkit2gtk3-jsc-devel-debuginfo-0:2.46.6-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_6?arch=x86_64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
- workaround: Systems which do not rely on a GUI for system administration (commonly referred to as "headless") should confirm that GNOME shell and WebKitGTK are not present on the system. WebKitGTK3 is no longer used and can therefore be uninstalled without consequence. WebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface.
webkit2gtk3-0:2.46.6-2.el8_8.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_8?arch=aarch64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
- workaround: Systems which do not rely on a GUI for system administration (commonly referred to as "headless") should confirm that GNOME shell and WebKitGTK are not present on the system. WebKitGTK3 is no longer used and can therefore be uninstalled without consequence. WebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface.
webkit2gtk3-devel-debuginfo-0:2.46.6-2.el8_8.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_8?arch=aarch64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
- workaround: Systems which do not rely on a GUI for system administration (commonly referred to as "headless") should confirm that GNOME shell and WebKitGTK are not present on the system. WebKitGTK3 is no longer used and can therefore be uninstalled without consequence. WebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface.
webkit2gtk3-jsc-devel-debuginfo-0:2.46.6-2.el8_8.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_8?arch=i686
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
- workaround: Systems which do not rely on a GUI for system administration (commonly referred to as "headless") should confirm that GNOME shell and WebKitGTK are not present on the system. WebKitGTK3 is no longer used and can therefore be uninstalled without consequence. WebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface.
webkit2gtk3-devel-0:2.46.6-2.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_0?arch=i686
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
- workaround: Systems which do not rely on a GUI for system administration (commonly referred to as "headless") should confirm that GNOME shell and WebKitGTK are not present on the system. WebKitGTK3 is no longer used and can therefore be uninstalled without consequence. WebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface.
webkit2gtk3-jsc-devel-0:2.46.6-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_0?arch=ppc64le
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
- workaround: Systems which do not rely on a GUI for system administration (commonly referred to as "headless") should confirm that GNOME shell and WebKitGTK are not present on the system. WebKitGTK3 is no longer used and can therefore be uninstalled without consequence. WebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface.
webkit2gtk3-debugsource-0:2.46.6-2.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_2?arch=i686
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
- workaround: Systems which do not rely on a GUI for system administration (commonly referred to as "headless") should confirm that GNOME shell and WebKitGTK are not present on the system. WebKitGTK3 is no longer used and can therefore be uninstalled without consequence. WebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface.
webkit2gtk3-jsc-debuginfo-0:2.46.6-2.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_2?arch=ppc64le
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
- workaround: Systems which do not rely on a GUI for system administration (commonly referred to as "headless") should confirm that GNOME shell and WebKitGTK are not present on the system. WebKitGTK3 is no longer used and can therefore be uninstalled without consequence. WebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface.
webkit2gtk3-debuginfo-0:2.46.6-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_4?arch=ppc64le
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
- workaround: Systems which do not rely on a GUI for system administration (commonly referred to as "headless") should confirm that GNOME shell and WebKitGTK are not present on the system. WebKitGTK3 is no longer used and can therefore be uninstalled without consequence. WebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface.
webkit2gtk3-jsc-0:2.46.6-2.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_4?arch=s390x
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
- workaround: Systems which do not rely on a GUI for system administration (commonly referred to as "headless") should confirm that GNOME shell and WebKitGTK are not present on the system. WebKitGTK3 is no longer used and can therefore be uninstalled without consequence. WebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface.
webkit2gtk3-0:2.46.6-2.el9_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_5?arch=s390x
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
- workaround: Systems which do not rely on a GUI for system administration (commonly referred to as "headless") should confirm that GNOME shell and WebKitGTK are not present on the system. WebKitGTK3 is no longer used and can therefore be uninstalled without consequence. WebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface.
webkit2gtk3-devel-debuginfo-0:2.46.6-2.el9_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_5?arch=s390x
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
- workaround: Systems which do not rely on a GUI for system administration (commonly referred to as "headless") should confirm that GNOME shell and WebKitGTK are not present on the system. WebKitGTK3 is no longer used and can therefore be uninstalled without consequence. WebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface.
webkit2gtk3-jsc-devel-debuginfo-0:2.46.6-2.el9_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9) · fixed
Vendor assessment for this product only.
pkg:rpm/redhat/[email protected]_5?arch=x86_64
- vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
- workaround: Systems which do not rely on a GUI for system administration (commonly referred to as "headless") should confirm that GNOME shell and WebKitGTK are not present on the system. WebKitGTK3 is no longer used and can therefore be uninstalled without consequence. WebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface.
webkitgtk as a component of Red Hat Enterprise Linux 6 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/webkitgtk
- workaround: Systems which do not rely on a GUI for system administration (commonly referred to as "headless") should confirm that GNOME shell and WebKitGTK are not present on the system. WebKitGTK3 is no longer used and can therefore be uninstalled without consequence. WebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface.
- no fix planned: Out of support scope
webkitgtk-devel as a component of Red Hat Enterprise Linux 6 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/webkitgtk-devel
- workaround: Systems which do not rely on a GUI for system administration (commonly referred to as "headless") should confirm that GNOME shell and WebKitGTK are not present on the system. WebKitGTK3 is no longer used and can therefore be uninstalled without consequence. WebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface.
- no fix planned: Out of support scope
webkitgtk-doc as a component of Red Hat Enterprise Linux 6 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/webkitgtk-doc
- workaround: Systems which do not rely on a GUI for system administration (commonly referred to as "headless") should confirm that GNOME shell and WebKitGTK are not present on the system. WebKitGTK3 is no longer used and can therefore be uninstalled without consequence. WebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface.
- no fix planned: Out of support scope
webkitgtk.src as a component of Red Hat Enterprise Linux 6 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/webkitgtk?arch=src
- workaround: Systems which do not rely on a GUI for system administration (commonly referred to as "headless") should confirm that GNOME shell and WebKitGTK are not present on the system. WebKitGTK3 is no longer used and can therefore be uninstalled without consequence. WebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface.
- no fix planned: Out of support scope
libwebkit2gtk as a component of Red Hat Enterprise Linux 7 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/libwebkit2gtk
- workaround: Systems which do not rely on a GUI for system administration (commonly referred to as "headless") should confirm that GNOME shell and WebKitGTK are not present on the system. WebKitGTK3 is no longer used and can therefore be uninstalled without consequence. WebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface.
- no fix planned: Will not fix
webkitgtk3 as a component of Red Hat Enterprise Linux 7 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/webkitgtk3
- workaround: Systems which do not rely on a GUI for system administration (commonly referred to as "headless") should confirm that GNOME shell and WebKitGTK are not present on the system. WebKitGTK3 is no longer used and can therefore be uninstalled without consequence. WebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface.
- no fix planned: Will not fix
webkitgtk3-devel as a component of Red Hat Enterprise Linux 7 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/webkitgtk3-devel
- workaround: Systems which do not rely on a GUI for system administration (commonly referred to as "headless") should confirm that GNOME shell and WebKitGTK are not present on the system. WebKitGTK3 is no longer used and can therefore be uninstalled without consequence. WebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface.
- no fix planned: Will not fix
webkitgtk3-doc as a component of Red Hat Enterprise Linux 7 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/webkitgtk3-doc
- workaround: Systems which do not rely on a GUI for system administration (commonly referred to as "headless") should confirm that GNOME shell and WebKitGTK are not present on the system. WebKitGTK3 is no longer used and can therefore be uninstalled without consequence. WebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface.
- no fix planned: Will not fix
webkitgtk3.src as a component of Red Hat Enterprise Linux 7 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/webkitgtk3?arch=src
- workaround: Systems which do not rely on a GUI for system administration (commonly referred to as "headless") should confirm that GNOME shell and WebKitGTK are not present on the system. WebKitGTK3 is no longer used and can therefore be uninstalled without consequence. WebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp. To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface.
- no fix planned: Will not fix
Unverified PoC candidates
Catalogue matches for further research. These repositories have not been validated as working exploits.
2 candidates
- https://github.com/The-Maxu/CVE-2025-24201-WebKit-Vulnerability-Detector-PoC-
CVE-2025-24201 WebKit Vulnerability Detector (PoC)
PoC-in-GitHub · CVE-2025-24201
PoC-in-GitHub · CVE-2025-24201 · Updated 2026-04-06T13:42:49Z - https://github.com/5ky9uy/glass-cage-i18-2025-24085-and-cve-2025-24201
Glass Cage is a zero-click PNG-based RCE chain in iOS 18.2.1, exploiting WebKit (CVE-2025-24201) and Core Media (CVE-2025-24085) to achieve sandbox escape, kernel-level access, and device bricking. Triggered via iMessage, it enables full compromise with no user interaction.
PoC-in-GitHub · CVE-2025-24201
PoC-in-GitHub · CVE-2025-24201 · Updated 2026-06-22T13:18:21Z
Additional exploitation reports
Source-specific reports, separate from CISA KEV. Repeated observations from one source are not independent confirmations.
- VulnCheck KEV · 2025-03-11T00:00:00Z
Source guidance: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Source ransomware assessment: Unknown
VulnCheck KEV · CVE-2025-24201 · Updated 2025-03-11T00:00:00Z - VulnCheck KEV · 2025-03-11T00:00:00ZVulnCheck KEV · CVE-2025-24201
VulnCheck KEV · CVE-2025-24201
VulnCheck KEV · CVE-2025-24201
VulnCheck KEV · CVE-2025-24201
VulnCheck KEV · CVE-2025-24201 - VulnCheck KEV · 2025-03-13T00:00:00ZVulnCheck KEV · CVE-2025-24201
- VulnCheck KEV · 2025-03-31T00:00:00ZVulnCheck KEV · CVE-2025-24201
VulnCheck KEV · CVE-2025-24201 - VulnCheck KEV · 2025-12-11T00:00:00ZVulnCheck KEV · CVE-2025-24201
- VulnCheck KEV · 2026-01-20T00:00:00ZVulnCheck KEV · CVE-2025-24201
- VulnCheck KEV · 2026-04-10T00:00:00ZVulnCheck KEV · CVE-2025-24201
Known Affected Software Configurations
| Vendor | Product | Version range |
|---|---|---|
| Apple | Safari | < 18.3.1 |
| Apple | Macos | ≥ 15.0 and < 15.3.2 |
| Apple | Visionos | < 2.3.2 |
| Apple | Watchos | < 11.4 |
| Apple | Ipados | ≥ 15.8 and < 15.8.4 |
| Apple | Ipados | ≥ 16.7 and < 16.7.11 |
| Apple | Ipados | ≥ 17.0 and < 17.7.6 |
| Apple | Ipados | ≥ 18.0 and < 18.3.2 |
| Apple | Iphone Os | ≥ 15.8 and < 15.8.4 |
| Apple | Iphone Os | ≥ 16.7 and < 16.7.11 |
| Apple | Iphone Os | ≥ 17.0 and < 18.3.2 |
| Debian | Debian Linux | 11.0 |
All CVSS metrics
- CRITICAL 10 v3.1 · ADP Primary
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - CRITICAL 10 v3.1 · NVD Primary
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
References
Advisories
- https://support.apple.com/en-us/122281 CVE record · apple · Updated 2026-04-02T18:10:13.716Z
NVD · CVE-2025-24201 · Updated 2026-06-17T08:58:17.950
Red Hat · CVE-2025-24201 · Updated 2026-06-29T20:41:27+00:00
VulnCheck KEV · CVE-2025-24201 · Updated 2025-03-11T00:00:00Z - https://support.apple.com/en-us/122283 CVE record · apple · Updated 2026-04-02T18:10:13.716Z
NVD · CVE-2025-24201 · Updated 2026-06-17T08:58:17.950
VulnCheck KEV · CVE-2025-24201 · Updated 2025-03-11T00:00:00Z - https://support.apple.com/en-us/122284 CVE record · apple · Updated 2026-04-02T18:10:13.716Z
NVD · CVE-2025-24201 · Updated 2026-06-17T08:58:17.950
Red Hat · CVE-2025-24201 · Updated 2026-06-29T20:41:27+00:00
VulnCheck KEV · CVE-2025-24201 · Updated 2025-03-11T00:00:00Z - https://support.apple.com/en-us/122285 CVE record · apple · Updated 2026-04-02T18:10:13.716Z
NVD · CVE-2025-24201 · Updated 2026-06-17T08:58:17.950
Red Hat · CVE-2025-24201 · Updated 2026-06-29T20:41:27+00:00
VulnCheck KEV · CVE-2025-24201 · Updated 2025-03-11T00:00:00Z - https://support.apple.com/en-us/122345 CVE record · apple · Updated 2026-04-02T18:10:13.716Z
NVD · CVE-2025-24201 · Updated 2026-06-17T08:58:17.950
VulnCheck KEV · CVE-2025-24201 · Updated 2025-03-11T00:00:00Z - https://support.apple.com/en-us/122346 CVE record · apple · Updated 2026-04-02T18:10:13.716Z
NVD · CVE-2025-24201 · Updated 2026-06-17T08:58:17.950
VulnCheck KEV · CVE-2025-24201 · Updated 2025-03-11T00:00:00Z - https://support.apple.com/en-us/122372 CVE record · apple · Updated 2026-04-02T18:10:13.716Z
NVD · CVE-2025-24201 · Updated 2026-06-17T08:58:17.950 - https://support.apple.com/en-us/122376 CVE record · apple · Updated 2026-04-02T18:10:13.716Z
NVD · CVE-2025-24201 · Updated 2026-06-17T08:58:17.950 - https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24201 CVE record · CISA-ADP · Updated 2025-11-12T14:34:01.244Z
NVD · CVE-2025-24201 · Updated 2026-06-17T08:58:17.950 - http://seclists.org/fulldisclosure/2025/Mar/2 CVE record · CVE · Updated 2025-11-13T19:45:58.488Z
NVD · CVE-2025-24201 · Updated 2026-06-17T08:58:17.950 - http://seclists.org/fulldisclosure/2025/Mar/3 CVE record · CVE · Updated 2025-11-13T19:45:58.488Z
NVD · CVE-2025-24201 · Updated 2026-06-17T08:58:17.950 - http://seclists.org/fulldisclosure/2025/Mar/4 CVE record · CVE · Updated 2025-11-13T19:45:58.488Z
NVD · CVE-2025-24201 · Updated 2026-06-17T08:58:17.950 - http://seclists.org/fulldisclosure/2025/Mar/5 CVE record · CVE · Updated 2025-11-13T19:45:58.488Z
NVD · CVE-2025-24201 · Updated 2026-06-17T08:58:17.950 - http://seclists.org/fulldisclosure/2025/Apr/16 CVE record · CVE · Updated 2025-11-13T19:45:58.488Z
NVD · CVE-2025-24201 · Updated 2026-06-17T08:58:17.950 - http://seclists.org/fulldisclosure/2025/Oct/31 CVE record · CVE · Updated 2025-11-13T19:45:58.488Z
NVD · CVE-2025-24201 · Updated 2026-06-17T08:58:17.950 - http://seclists.org/fulldisclosure/2025/Oct/1 CVE record · CVE · Updated 2025-11-13T19:45:58.488Z
NVD · CVE-2025-24201 · Updated 2026-06-17T08:58:17.950 - http://seclists.org/fulldisclosure/2025/Jun/19 CVE record · CVE · Updated 2025-11-13T19:45:58.488Z
NVD · CVE-2025-24201 · Updated 2026-06-17T08:58:17.950 - http://seclists.org/fulldisclosure/2025/Apr/7 CVE record · CVE · Updated 2025-11-13T19:45:58.488Z
NVD · CVE-2025-24201 · Updated 2026-06-17T08:58:17.950 - https://github.com/JGoyd/Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201 CVE record · CVE · Updated 2025-11-13T19:45:58.488Z
NVD · CVE-2025-24201 · Updated 2026-06-17T08:58:17.950 - https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json Red Hat · CVE-2025-24201 · Updated 2026-06-29T20:41:27+00:00
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-6302 EUVD · EUVD-2025-6302
- https://vulncheck.com/kev VulnCheck KEV · CVE-2025-24201 · Updated 2025-03-11T00:00:00Z
Technical & other
- https://lists.debian.org/debian-lts-announce/2025/06/msg00016.html CVE record · CVE · Updated 2025-11-13T19:45:58.488Z
NVD · CVE-2025-24201 · Updated 2026-06-17T08:58:17.950 - https://github.com/cisagov/vulnrichment/issues/194 CVE record · CVE · Updated 2025-11-13T19:45:58.488Z
NVD · CVE-2025-24201 · Updated 2026-06-17T08:58:17.950 - https://access.redhat.com/security/cve/CVE-2025-24201 Red Hat · CVE-2025-24201 · Updated 2026-06-29T20:41:27+00:00
- https://bugzilla.redhat.com/show_bug.cgi?id=2351802 Red Hat · CVE-2025-24201 · Updated 2026-06-29T20:41:27+00:00
- https://www.cve.org/CVERecord?id=CVE-2025-24201 Red Hat · CVE-2025-24201 · Updated 2026-06-29T20:41:27+00:00
- https://nvd.nist.gov/vuln/detail/CVE-2025-24201 Red Hat · CVE-2025-24201 · Updated 2026-06-29T20:41:27+00:00
- https://webkitgtk.org/security/WSA-2025-0002.html Red Hat · CVE-2025-24201 · Updated 2026-06-29T20:41:27+00:00
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog Red Hat · CVE-2025-24201 · Updated 2026-06-29T20:41:27+00:00
- https://access.redhat.com/errata/RHSA-2025:10364 Red Hat · CVE-2025-24201 · Updated 2026-06-29T20:41:27+00:00
- https://access.redhat.com/errata/RHSA-2025:2863 Red Hat · CVE-2025-24201 · Updated 2026-06-29T20:41:27+00:00
- https://access.redhat.com/errata/RHSA-2025:3002 Red Hat · CVE-2025-24201 · Updated 2026-06-29T20:41:27+00:00
- https://access.redhat.com/errata/RHSA-2025:3005 Red Hat · CVE-2025-24201 · Updated 2026-06-29T20:41:27+00:00
- https://access.redhat.com/errata/RHSA-2025:3034 Red Hat · CVE-2025-24201 · Updated 2026-06-29T20:41:27+00:00
- https://access.redhat.com/errata/RHSA-2025:2998 Red Hat · CVE-2025-24201 · Updated 2026-06-29T20:41:27+00:00
- https://access.redhat.com/errata/RHSA-2025:3000 Red Hat · CVE-2025-24201 · Updated 2026-06-29T20:41:27+00:00
- https://access.redhat.com/errata/RHSA-2025:3001 Red Hat · CVE-2025-24201 · Updated 2026-06-29T20:41:27+00:00
- https://access.redhat.com/errata/RHSA-2025:2997 Red Hat · CVE-2025-24201 · Updated 2026-06-29T20:41:27+00:00
- https://access.redhat.com/errata/RHSA-2025:2864 Red Hat · CVE-2025-24201 · Updated 2026-06-29T20:41:27+00:00
- https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/edit VulnCheck KEV · CVE-2025-24201 · Updated 2025-03-11T00:00:00Z
- https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json VulnCheck KEV · CVE-2025-24201 · Updated 2025-03-11T00:00:00Z
- https://cyble.com/resources/research-reports/global-cybersecurity-report/ VulnCheck KEV · CVE-2025-24201 · Updated 2025-03-11T00:00:00Z
- https://www.loginsoft.com/reports/annually/vulnerability-intelligence-report-2025 VulnCheck KEV · CVE-2025-24201 · Updated 2025-03-11T00:00:00Z
- https://www.redhat.com/en/resources/product-security-risk-report-2025 VulnCheck KEV · CVE-2025-24201 · Updated 2025-03-11T00:00:00Z
- https://vulncheck.com/xdb/b9d4450ffbee VulnCheck KEV · b9d4450ffbee · Updated 2025-03-11T00:00:00Z
- https://github.com/The-Maxu/CVE-2025-24201-WebKit-Vulnerability-Detector-PoC- VulnCheck KEV · b9d4450ffbee · Updated 2025-03-11T00:00:00Z
Sources: NVD · CVE.org · All sources and attribution · EPSS