Is CVE-2025-31277 being actively exploited?

Yes. CVE-2025-31277 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added on March 20, 2026.

What is the CVSS score for CVE-2025-31277?

CVE-2025-31277 has a CVSS 3.1 base score of 8.8 (HIGH).

CVE-2025-31277

HIGH · CVSS 8.8CISA KEV: actively exploitedEPSS 1.6%EU EUVD: exploited

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.

Key facts

CVSS score: 8.8 (v3.1)
Severity: HIGH
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-119
EPSS score: 1.6% (75th percentile)
In CISA KEV: Yes, added March 20, 2026
In EU EUVD: Yes (EUVD-2025-23063)
Published: July 30, 2025
NVD last modified: September 21, 2026
Status: Analyzed

CISA Known Exploited Vulnerability

Apple Multiple Products Buffer Overflow Vulnerability

Added to the KEV catalog on March 20, 2026; federal remediation due April 3, 2026.

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2025-23063 in the EU Vulnerability Database. ENISA flags it as known exploited. Last updated in EUVD on September 21, 2026.

View on the EU Vulnerability Database

Affected products

apple / ipados
apple / iphone os
apple / macos
apple / safari
apple / tvos
apple / visionos
apple / watchos
redhat / enterprise linux
redhat / enterprise linux
redhat / enterprise linux
redhat / enterprise linux
redhat / enterprise linux aus
redhat / enterprise linux aus
redhat / enterprise linux aus
redhat / enterprise linux els
redhat / enterprise linux eus
redhat / enterprise linux eus
redhat / enterprise linux eus
redhat / enterprise linux tus
redhat / enterprise linux tus
redhat / enterprise linux update services for sap solutions
redhat / enterprise linux update services for sap solutions
redhat / enterprise linux update services for sap solutions
redhat / enterprise linux update services for sap solutions
webkitgtk / webkitgtk
wpewebkit / wpe webkit

Certified products that may be affected

55 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

Red Hat Enterprise Linux 8 NSS Cryptographic Module - Red Hat, Inc. - FIPS 140 5513 - active
Red Hat Enterprise Linux 8 Kernel Cryptographic API - Red Hat, LLC - FIPS 140 5461 - active
Red Hat Enterprise Linux 9 Kernel Cryptographic API - Red Hat, Inc. - FIPS 140 5445 - active
Red Hat Enterprise Linux 9 libgcrypt - Red Hat, Inc. - FIPS 140 5366 - active
Apple macOS 15 Sequoia - Apple Inc. - Common Criteria CCEVS-VR-VID-11648-2026 - active

See all 55 in the Security Certifications Explorer.

References

http://seclists.org/fulldisclosure/2025/Aug/0(Mailing List, Third Party Advisory)
http://seclists.org/fulldisclosure/2025/Jul/30(Mailing List, Third Party Advisory)
http://seclists.org/fulldisclosure/2025/Jul/32(Mailing List, Third Party Advisory)
http://seclists.org/fulldisclosure/2025/Jul/36(Mailing List, Third Party Advisory)
https://access.redhat.com/errata/RHSA-2025:17643(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2025:17741(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2025:17743(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2025:17802(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2025:17807(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2025:18097(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2025:19109(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2025:19157(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2025:19165(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2025:19352(Third Party Advisory)
https://access.redhat.com/security/cve/CVE-2025-31277(Third Party Advisory)
https://bugzilla.redhat.com/show_bug.cgi?id=2448780(Third Party Advisory)
https://cloud.google.com/blog/topics/threat-intelligence/darksword-ios-exploit-chain/(Technical Description)
https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-31277.json(Third Party Advisory)
https://support.apple.com/en-us/124147(Release Notes, Vendor Advisory)
https://support.apple.com/en-us/124149(Release Notes, Vendor Advisory)
https://support.apple.com/en-us/124152(Release Notes, Vendor Advisory)
https://support.apple.com/en-us/124153(Release Notes, Vendor Advisory)
https://support.apple.com/en-us/124154(Release Notes, Vendor Advisory)
https://support.apple.com/en-us/124155(Release Notes, Vendor Advisory)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-31277(US Government Resource)

Last updated September 23, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain