High · published November 6, 2025
CVSS calls it high at 8.8. It is confirmed in active exploitation. It sits in the 90.6th percentile for exploit probability.
🚨 A crafty piece of web content could exploit this use-after-free vulnerability, potentially leading to memory corruption. 😱 Think of it like a hotel guest who mistakenly tries to access a room they’ve already checked out of — it can create confusion and chaos in the system, leading to disastrous consequences if not managed properly. An attacker could potentially craft malicious content that, when processed, causes instability in your system. This could lead to unauthorized access or crashing applications, which is absolutely devastating for users relying on these devices.
Think of it like a hotel guest who mistakenly tries to access a room they’ve already checked out of — it can create confusion and chaos in the system, leading to disastrous consequences if not managed properly. This use-after-free vulnerability arises from improper memory management, allowing attackers to corrupt memory by processing specially crafted web content. The flaw affects multiple versions of macOS and iOS, making it a significant security concern.
An attacker could potentially craft malicious content that, when processed, causes instability in your system. This could lead to unauthorized access or crashing applications, which is absolutely devastating for users relying on these devices. Update your devices immediately to macOS Ventura 13.5, iOS 16.6, or the latest Safari 16.6. If you're on iOS 15 or iPadOS 15, ensure you upgrade to version 15.8.7 to patch this vulnerability. You've got this! Follow these steps and you'll be on your way to securing your devices in no time! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| apple/safari | < 16.6 | 16.6 |
| apple/ipados | < 15.8.7 | 15.8.7 |
| apple/ipados | ≥ 16.0, < 16.6 | 16.6 |
| apple/iphone_os | < 15.8.7 | 15.8.7 |
| apple/iphone_os | ≥ 16.0, < 16.6 | 16.6 |
| apple/macos | < 13.5 | 13.5 |