{"schema":"vulnpedia.research/1","cve":"CVE-2025-24201","references":[{"url":"https://support.apple.com/en-us/122281","tags":["Release Notes","Vendor Advisory","vendor-reference","KEV report"],"source":"mitre","sourceId":"apple","modified":"2026-04-02T18:10:13.716Z","origins":[{"source":"mitre","sourceId":"apple","modified":"2026-04-02T18:10:13.716Z","url":"https://support.apple.com/en-us/122281"},{"source":"nvd","sourceId":"CVE-2025-24201","modified":"2026-06-17T08:58:17.950","url":"https://support.apple.com/en-us/122281"},{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://support.apple.com/en-us/122281"},{"source":"vulncheck-kev","sourceId":"CVE-2025-24201","modified":"2025-03-11T00:00:00Z","url":"https://support.apple.com/en-us/122281"}]},{"url":"https://support.apple.com/en-us/122283","tags":["Release Notes","Vendor Advisory","KEV report"],"source":"mitre","sourceId":"apple","modified":"2026-04-02T18:10:13.716Z","origins":[{"source":"mitre","sourceId":"apple","modified":"2026-04-02T18:10:13.716Z","url":"https://support.apple.com/en-us/122283"},{"source":"nvd","sourceId":"CVE-2025-24201","modified":"2026-06-17T08:58:17.950","url":"https://support.apple.com/en-us/122283"},{"source":"vulncheck-kev","sourceId":"CVE-2025-24201","modified":"2025-03-11T00:00:00Z","url":"https://support.apple.com/en-us/122283"}]},{"url":"https://support.apple.com/en-us/122284","tags":["Release Notes","Vendor Advisory","vendor-reference","KEV report"],"source":"mitre","sourceId":"apple","modified":"2026-04-02T18:10:13.716Z","origins":[{"source":"mitre","sourceId":"apple","modified":"2026-04-02T18:10:13.716Z","url":"https://support.apple.com/en-us/122284"},{"source":"nvd","sourceId":"CVE-2025-24201","modified":"2026-06-17T08:58:17.950","url":"https://support.apple.com/en-us/122284"},{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://support.apple.com/en-us/122284"},{"source":"vulncheck-kev","sourceId":"CVE-2025-24201","modified":"2025-03-11T00:00:00Z","url":"https://support.apple.com/en-us/122284"}]},{"url":"https://support.apple.com/en-us/122285","tags":["Release Notes","Vendor Advisory","vendor-reference","KEV report"],"source":"mitre","sourceId":"apple","modified":"2026-04-02T18:10:13.716Z","origins":[{"source":"mitre","sourceId":"apple","modified":"2026-04-02T18:10:13.716Z","url":"https://support.apple.com/en-us/122285"},{"source":"nvd","sourceId":"CVE-2025-24201","modified":"2026-06-17T08:58:17.950","url":"https://support.apple.com/en-us/122285"},{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://support.apple.com/en-us/122285"},{"source":"vulncheck-kev","sourceId":"CVE-2025-24201","modified":"2025-03-11T00:00:00Z","url":"https://support.apple.com/en-us/122285"}]},{"url":"https://support.apple.com/en-us/122345","tags":["Release Notes","Vendor Advisory","KEV report"],"source":"mitre","sourceId":"apple","modified":"2026-04-02T18:10:13.716Z","origins":[{"source":"mitre","sourceId":"apple","modified":"2026-04-02T18:10:13.716Z","url":"https://support.apple.com/en-us/122345"},{"source":"nvd","sourceId":"CVE-2025-24201","modified":"2026-06-17T08:58:17.950","url":"https://support.apple.com/en-us/122345"},{"source":"vulncheck-kev","sourceId":"CVE-2025-24201","modified":"2025-03-11T00:00:00Z","url":"https://support.apple.com/en-us/122345"}]},{"url":"https://support.apple.com/en-us/122346","tags":["Release Notes","Vendor Advisory","KEV report"],"source":"mitre","sourceId":"apple","modified":"2026-04-02T18:10:13.716Z","origins":[{"source":"mitre","sourceId":"apple","modified":"2026-04-02T18:10:13.716Z","url":"https://support.apple.com/en-us/122346"},{"source":"nvd","sourceId":"CVE-2025-24201","modified":"2026-06-17T08:58:17.950","url":"https://support.apple.com/en-us/122346"},{"source":"vulncheck-kev","sourceId":"CVE-2025-24201","modified":"2025-03-11T00:00:00Z","url":"https://support.apple.com/en-us/122346"}]},{"url":"https://support.apple.com/en-us/122372","tags":["Release Notes","Vendor Advisory"],"source":"mitre","sourceId":"apple","modified":"2026-04-02T18:10:13.716Z","origins":[{"source":"mitre","sourceId":"apple","modified":"2026-04-02T18:10:13.716Z","url":"https://support.apple.com/en-us/122372"},{"source":"nvd","sourceId":"CVE-2025-24201","modified":"2026-06-17T08:58:17.950","url":"https://support.apple.com/en-us/122372"}]},{"url":"https://support.apple.com/en-us/122376","tags":["Release Notes","Vendor Advisory"],"source":"mitre","sourceId":"apple","modified":"2026-04-02T18:10:13.716Z","origins":[{"source":"mitre","sourceId":"apple","modified":"2026-04-02T18:10:13.716Z","url":"https://support.apple.com/en-us/122376"},{"source":"nvd","sourceId":"CVE-2025-24201","modified":"2026-06-17T08:58:17.950","url":"https://support.apple.com/en-us/122376"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24201","tags":["government-resource","US Government Resource"],"source":"mitre","sourceId":"CISA-ADP","modified":"2025-11-12T14:34:01.244Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2025-11-12T14:34:01.244Z","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24201"},{"source":"nvd","sourceId":"CVE-2025-24201","modified":"2026-06-17T08:58:17.950","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24201"}]},{"url":"http://seclists.org/fulldisclosure/2025/Mar/2","tags":["Mailing List","Third Party Advisory"],"source":"mitre","sourceId":"CVE","modified":"2025-11-13T19:45:58.488Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-13T19:45:58.488Z","url":"http://seclists.org/fulldisclosure/2025/Mar/2"},{"source":"nvd","sourceId":"CVE-2025-24201","modified":"2026-06-17T08:58:17.950","url":"http://seclists.org/fulldisclosure/2025/Mar/2"}]},{"url":"http://seclists.org/fulldisclosure/2025/Mar/3","tags":["Mailing List","Third Party Advisory"],"source":"mitre","sourceId":"CVE","modified":"2025-11-13T19:45:58.488Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-13T19:45:58.488Z","url":"http://seclists.org/fulldisclosure/2025/Mar/3"},{"source":"nvd","sourceId":"CVE-2025-24201","modified":"2026-06-17T08:58:17.950","url":"http://seclists.org/fulldisclosure/2025/Mar/3"}]},{"url":"http://seclists.org/fulldisclosure/2025/Mar/4","tags":["Mailing List","Third Party Advisory"],"source":"mitre","sourceId":"CVE","modified":"2025-11-13T19:45:58.488Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-13T19:45:58.488Z","url":"http://seclists.org/fulldisclosure/2025/Mar/4"},{"source":"nvd","sourceId":"CVE-2025-24201","modified":"2026-06-17T08:58:17.950","url":"http://seclists.org/fulldisclosure/2025/Mar/4"}]},{"url":"http://seclists.org/fulldisclosure/2025/Mar/5","tags":["Mailing List","Third Party Advisory"],"source":"mitre","sourceId":"CVE","modified":"2025-11-13T19:45:58.488Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-13T19:45:58.488Z","url":"http://seclists.org/fulldisclosure/2025/Mar/5"},{"source":"nvd","sourceId":"CVE-2025-24201","modified":"2026-06-17T08:58:17.950","url":"http://seclists.org/fulldisclosure/2025/Mar/5"}]},{"url":"http://seclists.org/fulldisclosure/2025/Apr/16","tags":["Mailing List","Third Party Advisory"],"source":"mitre","sourceId":"CVE","modified":"2025-11-13T19:45:58.488Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-13T19:45:58.488Z","url":"http://seclists.org/fulldisclosure/2025/Apr/16"},{"source":"nvd","sourceId":"CVE-2025-24201","modified":"2026-06-17T08:58:17.950","url":"http://seclists.org/fulldisclosure/2025/Apr/16"}]},{"url":"http://seclists.org/fulldisclosure/2025/Oct/31","tags":["Mailing List","Third Party Advisory"],"source":"mitre","sourceId":"CVE","modified":"2025-11-13T19:45:58.488Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-13T19:45:58.488Z","url":"http://seclists.org/fulldisclosure/2025/Oct/31"},{"source":"nvd","sourceId":"CVE-2025-24201","modified":"2026-06-17T08:58:17.950","url":"http://seclists.org/fulldisclosure/2025/Oct/31"}]},{"url":"http://seclists.org/fulldisclosure/2025/Oct/1","tags":["Mailing List","Third Party Advisory"],"source":"mitre","sourceId":"CVE","modified":"2025-11-13T19:45:58.488Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-13T19:45:58.488Z","url":"http://seclists.org/fulldisclosure/2025/Oct/1"},{"source":"nvd","sourceId":"CVE-2025-24201","modified":"2026-06-17T08:58:17.950","url":"http://seclists.org/fulldisclosure/2025/Oct/1"}]},{"url":"https://lists.debian.org/debian-lts-announce/2025/06/msg00016.html","tags":["Mailing List"],"source":"mitre","sourceId":"CVE","modified":"2025-11-13T19:45:58.488Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-13T19:45:58.488Z","url":"https://lists.debian.org/debian-lts-announce/2025/06/msg00016.html"},{"source":"nvd","sourceId":"CVE-2025-24201","modified":"2026-06-17T08:58:17.950","url":"https://lists.debian.org/debian-lts-announce/2025/06/msg00016.html"}]},{"url":"http://seclists.org/fulldisclosure/2025/Jun/19","tags":["Mailing List","Third Party Advisory"],"source":"mitre","sourceId":"CVE","modified":"2025-11-13T19:45:58.488Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-13T19:45:58.488Z","url":"http://seclists.org/fulldisclosure/2025/Jun/19"},{"source":"nvd","sourceId":"CVE-2025-24201","modified":"2026-06-17T08:58:17.950","url":"http://seclists.org/fulldisclosure/2025/Jun/19"}]},{"url":"http://seclists.org/fulldisclosure/2025/Apr/7","tags":["Mailing List","Third Party Advisory"],"source":"mitre","sourceId":"CVE","modified":"2025-11-13T19:45:58.488Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-13T19:45:58.488Z","url":"http://seclists.org/fulldisclosure/2025/Apr/7"},{"source":"nvd","sourceId":"CVE-2025-24201","modified":"2026-06-17T08:58:17.950","url":"http://seclists.org/fulldisclosure/2025/Apr/7"}]},{"url":"https://github.com/JGoyd/Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201","tags":["Third Party Advisory"],"source":"mitre","sourceId":"CVE","modified":"2025-11-13T19:45:58.488Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-13T19:45:58.488Z","url":"https://github.com/JGoyd/Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201"},{"source":"nvd","sourceId":"CVE-2025-24201","modified":"2026-06-17T08:58:17.950","url":"https://github.com/JGoyd/Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201"}]},{"url":"https://github.com/cisagov/vulnrichment/issues/194","tags":["Issue Tracking"],"source":"mitre","sourceId":"CVE","modified":"2025-11-13T19:45:58.488Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-13T19:45:58.488Z","url":"https://github.com/cisagov/vulnrichment/issues/194"},{"source":"nvd","sourceId":"CVE-2025-24201","modified":"2026-06-17T08:58:17.950","url":"https://github.com/cisagov/vulnrichment/issues/194"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2025-24201","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://access.redhat.com/security/cve/CVE-2025-24201"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351802","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351802"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-24201","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2025-24201"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-24201","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-24201"}]},{"url":"https://webkitgtk.org/security/WSA-2025-0002.html","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://webkitgtk.org/security/WSA-2025-0002.html"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:10364","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://access.redhat.com/errata/RHSA-2025:10364"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:2863","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://access.redhat.com/errata/RHSA-2025:2863"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:3002","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://access.redhat.com/errata/RHSA-2025:3002"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:3005","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://access.redhat.com/errata/RHSA-2025:3005"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:3034","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://access.redhat.com/errata/RHSA-2025:3034"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:2998","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://access.redhat.com/errata/RHSA-2025:2998"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:3000","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://access.redhat.com/errata/RHSA-2025:3000"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:3001","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://access.redhat.com/errata/RHSA-2025:3001"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:2997","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://access.redhat.com/errata/RHSA-2025:2997"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:2864","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://access.redhat.com/errata/RHSA-2025:2864"}]},{"source":"euvd","sourceId":"EUVD-2025-6302","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-6302","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2025-6302","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-6302"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2025-24201","modified":"2025-03-11T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-24201","modified":"2025-03-11T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/edit","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-24201","modified":"2025-03-11T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-24201","modified":"2025-03-11T00:00:00Z","url":"https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/edit"}]},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-24201","modified":"2025-03-11T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-24201","modified":"2025-03-11T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"url":"https://cyble.com/resources/research-reports/global-cybersecurity-report/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-24201","modified":"2025-03-11T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-24201","modified":"2025-03-11T00:00:00Z","url":"https://cyble.com/resources/research-reports/global-cybersecurity-report/"}]},{"url":"https://www.loginsoft.com/reports/annually/vulnerability-intelligence-report-2025","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-24201","modified":"2025-03-11T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-24201","modified":"2025-03-11T00:00:00Z","url":"https://www.loginsoft.com/reports/annually/vulnerability-intelligence-report-2025"}]},{"url":"https://www.redhat.com/en/resources/product-security-risk-report-2025","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-24201","modified":"2025-03-11T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-24201","modified":"2025-03-11T00:00:00Z","url":"https://www.redhat.com/en/resources/product-security-risk-report-2025"}]},{"url":"https://vulncheck.com/xdb/b9d4450ffbee","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"b9d4450ffbee","modified":"2025-03-11T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"b9d4450ffbee","modified":"2025-03-11T00:00:00Z","url":"https://vulncheck.com/xdb/b9d4450ffbee"}]},{"url":"https://github.com/The-Maxu/CVE-2025-24201-WebKit-Vulnerability-Detector-PoC-","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"b9d4450ffbee","modified":"2025-03-11T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"b9d4450ffbee","modified":"2025-03-11T00:00:00Z","url":"https://github.com/The-Maxu/CVE-2025-24201-WebKit-Vulnerability-Detector-PoC-"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/The-Maxu/CVE-2025-24201-WebKit-Vulnerability-Detector-PoC-","source":"poc-in-github","sourceId":"CVE-2025-24201","description":"CVE-2025-24201 WebKit Vulnerability Detector (PoC)","modified":"2026-04-06T13:42:49Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-24201","url":"https://github.com/The-Maxu/CVE-2025-24201-WebKit-Vulnerability-Detector-PoC-"},{"source":"poc-in-github","sourceId":"CVE-2025-24201","modified":"2026-04-06T13:42:49Z","url":"https://github.com/The-Maxu/CVE-2025-24201-WebKit-Vulnerability-Detector-PoC-"}],"tags":[]},{"url":"https://github.com/5ky9uy/glass-cage-i18-2025-24085-and-cve-2025-24201","source":"poc-in-github","sourceId":"CVE-2025-24201","description":"Glass Cage is a zero-click PNG-based RCE chain in iOS 18.2.1, exploiting WebKit (CVE-2025-24201) and Core Media (CVE-2025-24085) to achieve sandbox escape, kernel-level access, and device bricking. Triggered via iMessage, it enables full compromise with no user interaction.","modified":"2026-06-22T13:18:21Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-24201","url":"https://github.com/5ky9uy/glass-cage-i18-2025-24085-and-cve-2025-24201"},{"source":"poc-in-github","sourceId":"CVE-2025-24201","modified":"2026-06-22T13:18:21Z","url":"https://github.com/5ky9uy/glass-cage-i18-2025-24085-and-cve-2025-24201"}],"tags":[]}],"cataloguedPoc":[{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"b9d4450ffbee","url":"https://vulncheck.com/xdb/b9d4450ffbee","cve":"CVE-2025-24201","dateAdded":"2025-07-14T12:11:09Z","modified":"2025-03-11T00:00:00Z","exploitType":"client-side","repositoryUrl":"https://github.com/The-Maxu/CVE-2025-24201-WebKit-Vulnerability-Detector-PoC-","observations":[{"dateAdded":"2025-07-14T12:11:09Z","exploitType":"client-side"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"b9d4450ffbee","modified":"2025-03-11T00:00:00Z","url":"https://vulncheck.com/xdb/b9d4450ffbee"}]}],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json","productId":"7Server-ELS:webkitgtk4-0:2.48.3-2.el7_9.s390x","product":"webkitgtk4-0:2.48.3-2.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:10364"},{"category":"workaround","details":"Systems which do not rely on a GUI for system administration (commonly referred to as \"headless\") should confirm that GNOME shell and WebKitGTK are not present on the system.\n\nWebKitGTK3 is no longer used and can therefore be uninstalled without consequence.\n\nWebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nTo mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface."}],"purl":"pkg:rpm/redhat/webkitgtk4@2.48.3-2.el7_9?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json"}]},{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.6-2.el8_10.ppc64le","product":"webkit2gtk3-debuginfo-0:2.46.6-2.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:2863"},{"category":"workaround","details":"Systems which do not rely on a GUI for system administration (commonly referred to as \"headless\") should confirm that GNOME shell and WebKitGTK are not present on the system.\n\nWebKitGTK3 is no longer used and can therefore be uninstalled without consequence.\n\nWebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nTo mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface."}],"purl":"pkg:rpm/redhat/webkit2gtk3-debuginfo@2.46.6-2.el8_10?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json"}]},{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.6-2.el8_10.s390x","product":"webkit2gtk3-jsc-0:2.46.6-2.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:2863"},{"category":"workaround","details":"Systems which do not rely on a GUI for system administration (commonly referred to as \"headless\") should confirm that GNOME shell and WebKitGTK are not present on the system.\n\nWebKitGTK3 is no longer used and can therefore be uninstalled without consequence.\n\nWebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nTo mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface."}],"purl":"pkg:rpm/redhat/webkit2gtk3-jsc@2.46.6-2.el8_10?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json"}]},{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json","productId":"AppStream-8.2.0.Z.AUS:webkit2gtk3-debuginfo-0:2.46.6-2.el8_2.i686","product":"webkit2gtk3-debuginfo-0:2.46.6-2.el8_2.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:3002"},{"category":"workaround","details":"Systems which do not rely on a GUI for system administration (commonly referred to as \"headless\") should confirm that GNOME shell and WebKitGTK are not present on the system.\n\nWebKitGTK3 is no longer used and can therefore be uninstalled without consequence.\n\nWebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nTo mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface."}],"purl":"pkg:rpm/redhat/webkit2gtk3-debuginfo@2.46.6-2.el8_2?arch=i686","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json"}]},{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json","productId":"AppStream-8.4.0.Z.AUS:webkit2gtk3-debugsource-0:2.46.6-2.el8_4.i686","product":"webkit2gtk3-debugsource-0:2.46.6-2.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:3005"},{"category":"workaround","details":"Systems which do not rely on a GUI for system administration (commonly referred to as \"headless\") should confirm that GNOME shell and WebKitGTK are not present on the system.\n\nWebKitGTK3 is no longer used and can therefore be uninstalled without consequence.\n\nWebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nTo mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface."}],"purl":"pkg:rpm/redhat/webkit2gtk3-debugsource@2.46.6-2.el8_4?arch=i686","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json"}]},{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json","productId":"AppStream-8.4.0.Z.E4S:webkit2gtk3-debugsource-0:2.46.6-2.el8_4.i686","product":"webkit2gtk3-debugsource-0:2.46.6-2.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:3005"},{"category":"workaround","details":"Systems which do not rely on a GUI for system administration (commonly referred to as \"headless\") should confirm that GNOME shell and WebKitGTK are not present on the system.\n\nWebKitGTK3 is no longer used and can therefore be uninstalled without consequence.\n\nWebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nTo mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface."}],"purl":"pkg:rpm/redhat/webkit2gtk3-debugsource@2.46.6-2.el8_4?arch=i686","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json"}]},{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json","productId":"AppStream-8.4.0.Z.TUS:webkit2gtk3-0:2.46.6-2.el8_4.i686","product":"webkit2gtk3-0:2.46.6-2.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream TUS (v.8.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:3005"},{"category":"workaround","details":"Systems which do not rely on a GUI for system administration (commonly referred to as \"headless\") should confirm that GNOME shell and WebKitGTK are not present on the system.\n\nWebKitGTK3 is no longer used and can therefore be uninstalled without consequence.\n\nWebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nTo mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface."}],"purl":"pkg:rpm/redhat/webkit2gtk3@2.46.6-2.el8_4?arch=i686","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json"}]},{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json","productId":"AppStream-8.6.0.Z.AUS:webkit2gtk3-0:2.46.6-2.el8_6.src","product":"webkit2gtk3-0:2.46.6-2.el8_6.src as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:3034"},{"category":"workaround","details":"Systems which do not rely on a GUI for system administration (commonly referred to as \"headless\") should confirm that GNOME shell and WebKitGTK are not present on the system.\n\nWebKitGTK3 is no longer used and can therefore be uninstalled without consequence.\n\nWebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nTo mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface."}],"purl":"pkg:rpm/redhat/webkit2gtk3@2.46.6-2.el8_6?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json"}]},{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json","productId":"AppStream-8.6.0.Z.E4S:webkit2gtk3-0:2.46.6-2.el8_6.s390x","product":"webkit2gtk3-0:2.46.6-2.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:3034"},{"category":"workaround","details":"Systems which do not rely on a GUI for system administration (commonly referred to as \"headless\") should confirm that GNOME shell and WebKitGTK are not present on the system.\n\nWebKitGTK3 is no longer used and can therefore be uninstalled without consequence.\n\nWebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nTo mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface."}],"purl":"pkg:rpm/redhat/webkit2gtk3@2.46.6-2.el8_6?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json"}]},{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json","productId":"AppStream-8.6.0.Z.E4S:webkit2gtk3-devel-debuginfo-0:2.46.6-2.el8_6.s390x","product":"webkit2gtk3-devel-debuginfo-0:2.46.6-2.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:3034"},{"category":"workaround","details":"Systems which do not rely on a GUI for system administration (commonly referred to as \"headless\") should confirm that GNOME shell and WebKitGTK are not present on the system.\n\nWebKitGTK3 is no longer used and can therefore be uninstalled without consequence.\n\nWebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nTo mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface."}],"purl":"pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.46.6-2.el8_6?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json"}]},{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json","productId":"AppStream-8.6.0.Z.E4S:webkit2gtk3-jsc-devel-debuginfo-0:2.46.6-2.el8_6.x86_64","product":"webkit2gtk3-jsc-devel-debuginfo-0:2.46.6-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.8.6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:3034"},{"category":"workaround","details":"Systems which do not rely on a GUI for system administration (commonly referred to as \"headless\") should confirm that GNOME shell and WebKitGTK are not present on the system.\n\nWebKitGTK3 is no longer used and can therefore be uninstalled without consequence.\n\nWebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nTo mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface."}],"purl":"pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.46.6-2.el8_6?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json"}]},{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json","productId":"AppStream-8.8.0.Z.EUS:webkit2gtk3-0:2.46.6-2.el8_8.aarch64","product":"webkit2gtk3-0:2.46.6-2.el8_8.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:2998"},{"category":"workaround","details":"Systems which do not rely on a GUI for system administration (commonly referred to as \"headless\") should confirm that GNOME shell and WebKitGTK are not present on the system.\n\nWebKitGTK3 is no longer used and can therefore be uninstalled without consequence.\n\nWebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nTo mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface."}],"purl":"pkg:rpm/redhat/webkit2gtk3@2.46.6-2.el8_8?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json"}]},{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json","productId":"AppStream-8.8.0.Z.EUS:webkit2gtk3-devel-debuginfo-0:2.46.6-2.el8_8.aarch64","product":"webkit2gtk3-devel-debuginfo-0:2.46.6-2.el8_8.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:2998"},{"category":"workaround","details":"Systems which do not rely on a GUI for system administration (commonly referred to as \"headless\") should confirm that GNOME shell and WebKitGTK are not present on the system.\n\nWebKitGTK3 is no longer used and can therefore be uninstalled without consequence.\n\nWebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nTo mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface."}],"purl":"pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.46.6-2.el8_8?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json"}]},{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json","productId":"AppStream-8.8.0.Z.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.6-2.el8_8.i686","product":"webkit2gtk3-jsc-devel-debuginfo-0:2.46.6-2.el8_8.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:2998"},{"category":"workaround","details":"Systems which do not rely on a GUI for system administration (commonly referred to as \"headless\") should confirm that GNOME shell and WebKitGTK are not present on the system.\n\nWebKitGTK3 is no longer used and can therefore be uninstalled without consequence.\n\nWebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nTo mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface."}],"purl":"pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.46.6-2.el8_8?arch=i686","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json"}]},{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json","productId":"AppStream-9.0.0.Z.E4S:webkit2gtk3-devel-0:2.46.6-2.el9_0.i686","product":"webkit2gtk3-devel-0:2.46.6-2.el9_0.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:3000"},{"category":"workaround","details":"Systems which do not rely on a GUI for system administration (commonly referred to as \"headless\") should confirm that GNOME shell and WebKitGTK are not present on the system.\n\nWebKitGTK3 is no longer used and can therefore be uninstalled without consequence.\n\nWebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nTo mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface."}],"purl":"pkg:rpm/redhat/webkit2gtk3-devel@2.46.6-2.el9_0?arch=i686","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json"}]},{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json","productId":"AppStream-9.0.0.Z.E4S:webkit2gtk3-jsc-devel-0:2.46.6-2.el9_0.ppc64le","product":"webkit2gtk3-jsc-devel-0:2.46.6-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.0)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:3000"},{"category":"workaround","details":"Systems which do not rely on a GUI for system administration (commonly referred to as \"headless\") should confirm that GNOME shell and WebKitGTK are not present on the system.\n\nWebKitGTK3 is no longer used and can therefore be uninstalled without consequence.\n\nWebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nTo mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface."}],"purl":"pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.46.6-2.el9_0?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json"}]},{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json","productId":"AppStream-9.2.0.Z.EUS:webkit2gtk3-debugsource-0:2.46.6-2.el9_2.i686","product":"webkit2gtk3-debugsource-0:2.46.6-2.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:3001"},{"category":"workaround","details":"Systems which do not rely on a GUI for system administration (commonly referred to as \"headless\") should confirm that GNOME shell and WebKitGTK are not present on the system.\n\nWebKitGTK3 is no longer used and can therefore be uninstalled without consequence.\n\nWebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nTo mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface."}],"purl":"pkg:rpm/redhat/webkit2gtk3-debugsource@2.46.6-2.el9_2?arch=i686","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json"}]},{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json","productId":"AppStream-9.2.0.Z.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.6-2.el9_2.ppc64le","product":"webkit2gtk3-jsc-debuginfo-0:2.46.6-2.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:3001"},{"category":"workaround","details":"Systems which do not rely on a GUI for system administration (commonly referred to as \"headless\") should confirm that GNOME shell and WebKitGTK are not present on the system.\n\nWebKitGTK3 is no longer used and can therefore be uninstalled without consequence.\n\nWebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nTo mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface."}],"purl":"pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.46.6-2.el9_2?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json"}]},{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json","productId":"AppStream-9.4.0.Z.EUS:webkit2gtk3-debuginfo-0:2.46.6-2.el9_4.ppc64le","product":"webkit2gtk3-debuginfo-0:2.46.6-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:2997"},{"category":"workaround","details":"Systems which do not rely on a GUI for system administration (commonly referred to as \"headless\") should confirm that GNOME shell and WebKitGTK are not present on the system.\n\nWebKitGTK3 is no longer used and can therefore be uninstalled without consequence.\n\nWebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nTo mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface."}],"purl":"pkg:rpm/redhat/webkit2gtk3-debuginfo@2.46.6-2.el9_4?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json"}]},{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json","productId":"AppStream-9.4.0.Z.EUS:webkit2gtk3-jsc-0:2.46.6-2.el9_4.s390x","product":"webkit2gtk3-jsc-0:2.46.6-2.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:2997"},{"category":"workaround","details":"Systems which do not rely on a GUI for system administration (commonly referred to as \"headless\") should confirm that GNOME shell and WebKitGTK are not present on the system.\n\nWebKitGTK3 is no longer used and can therefore be uninstalled without consequence.\n\nWebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nTo mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface."}],"purl":"pkg:rpm/redhat/webkit2gtk3-jsc@2.46.6-2.el9_4?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json"}]},{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json","productId":"AppStream-9.5.0.Z.MAIN:webkit2gtk3-0:2.46.6-2.el9_5.s390x","product":"webkit2gtk3-0:2.46.6-2.el9_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:2864"},{"category":"workaround","details":"Systems which do not rely on a GUI for system administration (commonly referred to as \"headless\") should confirm that GNOME shell and WebKitGTK are not present on the system.\n\nWebKitGTK3 is no longer used and can therefore be uninstalled without consequence.\n\nWebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nTo mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface."}],"purl":"pkg:rpm/redhat/webkit2gtk3@2.46.6-2.el9_5?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json"}]},{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json","productId":"AppStream-9.5.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.46.6-2.el9_5.s390x","product":"webkit2gtk3-devel-debuginfo-0:2.46.6-2.el9_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:2864"},{"category":"workaround","details":"Systems which do not rely on a GUI for system administration (commonly referred to as \"headless\") should confirm that GNOME shell and WebKitGTK are not present on the system.\n\nWebKitGTK3 is no longer used and can therefore be uninstalled without consequence.\n\nWebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nTo mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface."}],"purl":"pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.46.6-2.el9_5?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json"}]},{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json","productId":"AppStream-9.5.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.46.6-2.el9_5.x86_64","product":"webkit2gtk3-jsc-devel-debuginfo-0:2.46.6-2.el9_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:2864"},{"category":"workaround","details":"Systems which do not rely on a GUI for system administration (commonly referred to as \"headless\") should confirm that GNOME shell and WebKitGTK are not present on the system.\n\nWebKitGTK3 is no longer used and can therefore be uninstalled without consequence.\n\nWebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nTo mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface."}],"purl":"pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.46.6-2.el9_5?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json"}]},{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json","productId":"red_hat_enterprise_linux_6:webkitgtk","product":"webkitgtk as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"workaround","details":"Systems which do not rely on a GUI for system administration (commonly referred to as \"headless\") should confirm that GNOME shell and WebKitGTK are not present on the system.\n\nWebKitGTK3 is no longer used and can therefore be uninstalled without consequence.\n\nWebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nTo mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/webkitgtk","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json"}]},{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json","productId":"red_hat_enterprise_linux_6:webkitgtk-devel","product":"webkitgtk-devel as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"workaround","details":"Systems which do not rely on a GUI for system administration (commonly referred to as \"headless\") should confirm that GNOME shell and WebKitGTK are not present on the system.\n\nWebKitGTK3 is no longer used and can therefore be uninstalled without consequence.\n\nWebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nTo mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/webkitgtk-devel","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json"}]},{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json","productId":"red_hat_enterprise_linux_6:webkitgtk-doc","product":"webkitgtk-doc as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"workaround","details":"Systems which do not rely on a GUI for system administration (commonly referred to as \"headless\") should confirm that GNOME shell and WebKitGTK are not present on the system.\n\nWebKitGTK3 is no longer used and can therefore be uninstalled without consequence.\n\nWebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nTo mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/webkitgtk-doc","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json"}]},{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json","productId":"red_hat_enterprise_linux_6:webkitgtk.src","product":"webkitgtk.src as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"workaround","details":"Systems which do not rely on a GUI for system administration (commonly referred to as \"headless\") should confirm that GNOME shell and WebKitGTK are not present on the system.\n\nWebKitGTK3 is no longer used and can therefore be uninstalled without consequence.\n\nWebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nTo mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/webkitgtk?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json"}]},{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json","productId":"red_hat_enterprise_linux_7:libwebkit2gtk","product":"libwebkit2gtk as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"Systems which do not rely on a GUI for system administration (commonly referred to as \"headless\") should confirm that GNOME shell and WebKitGTK are not present on the system.\n\nWebKitGTK3 is no longer used and can therefore be uninstalled without consequence.\n\nWebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nTo mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface."},{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:rpm/redhat/libwebkit2gtk","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json"}]},{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json","productId":"red_hat_enterprise_linux_7:webkitgtk3","product":"webkitgtk3 as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"Systems which do not rely on a GUI for system administration (commonly referred to as \"headless\") should confirm that GNOME shell and WebKitGTK are not present on the system.\n\nWebKitGTK3 is no longer used and can therefore be uninstalled without consequence.\n\nWebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nTo mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface."},{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:rpm/redhat/webkitgtk3","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json"}]},{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json","productId":"red_hat_enterprise_linux_7:webkitgtk3-devel","product":"webkitgtk3-devel as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"Systems which do not rely on a GUI for system administration (commonly referred to as \"headless\") should confirm that GNOME shell and WebKitGTK are not present on the system.\n\nWebKitGTK3 is no longer used and can therefore be uninstalled without consequence.\n\nWebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nTo mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface."},{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:rpm/redhat/webkitgtk3-devel","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json"}]},{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json","productId":"red_hat_enterprise_linux_7:webkitgtk3-doc","product":"webkitgtk3-doc as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"Systems which do not rely on a GUI for system administration (commonly referred to as \"headless\") should confirm that GNOME shell and WebKitGTK are not present on the system.\n\nWebKitGTK3 is no longer used and can therefore be uninstalled without consequence.\n\nWebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nTo mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface."},{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:rpm/redhat/webkitgtk3-doc","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json"}]},{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json","productId":"red_hat_enterprise_linux_7:webkitgtk3.src","product":"webkitgtk3.src as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"Systems which do not rely on a GUI for system administration (commonly referred to as \"headless\") should confirm that GNOME shell and WebKitGTK are not present on the system.\n\nWebKitGTK3 is no longer used and can therefore be uninstalled without consequence.\n\nWebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nTo mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface."},{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:rpm/redhat/webkitgtk3?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2025-24201","modified":"2026-06-29T20:41:27+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24201.json"}]}],"vendorCoverage":{"total":467,"shown":32,"omitted":435,"source":"redhat"},"exploitationSources":[{"source":"vulncheck-kev","sourceId":"CVE-2025-24201","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2025-03-11T00:00:00Z","modified":"2025-03-11T00:00:00Z","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown","reportedByVulncheckCanaries":false,"vendorProject":"Apple","product":"Multiple Products","dueDate":"2025-04-03T00:00:00Z","cisaDateAdded":"2025-03-13T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-24201","modified":"2025-03-11T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-24201","catalog":"VulnCheck KEV","kind":"report","url":"https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/edit","dateAdded":"2025-03-11T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-24201","url":"https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/edit"},{"source":"vulncheck-kev","sourceId":"CVE-2025-24201","url":"https://support.apple.com/en-us/122281"},{"source":"vulncheck-kev","sourceId":"CVE-2025-24201","url":"https://support.apple.com/en-us/122283"},{"source":"vulncheck-kev","sourceId":"CVE-2025-24201","url":"https://support.apple.com/en-us/122284"},{"source":"vulncheck-kev","sourceId":"CVE-2025-24201","url":"https://support.apple.com/en-us/122285"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-24201","catalog":"VulnCheck KEV","kind":"report","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","dateAdded":"2025-03-13T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-24201","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-24201","catalog":"VulnCheck KEV","kind":"report","url":"https://support.apple.com/en-us/122345","dateAdded":"2025-03-31T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-24201","url":"https://support.apple.com/en-us/122345"},{"source":"vulncheck-kev","sourceId":"CVE-2025-24201","url":"https://support.apple.com/en-us/122346"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-24201","catalog":"VulnCheck KEV","kind":"report","url":"https://cyble.com/resources/research-reports/global-cybersecurity-report/","dateAdded":"2025-12-11T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-24201","url":"https://cyble.com/resources/research-reports/global-cybersecurity-report/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-24201","catalog":"VulnCheck KEV","kind":"report","url":"https://www.loginsoft.com/reports/annually/vulnerability-intelligence-report-2025","dateAdded":"2026-01-20T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-24201","url":"https://www.loginsoft.com/reports/annually/vulnerability-intelligence-report-2025"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-24201","catalog":"VulnCheck KEV","kind":"report","url":"https://www.redhat.com/en/resources/product-security-risk-report-2025","dateAdded":"2026-04-10T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-24201","url":"https://www.redhat.com/en/resources/product-security-risk-report-2025"}]}]}