Vulnerabilities

CVSS

8.8 High

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Risk score

100.0

Known exploited

CISA KEV

Published

2025-07-29

Status

Published

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.

Weaknesses

Processing maliciously crafted web content may lead to memory corruptionCWE-119CWE-120

Coverage 1

threat-intel

Coruna, DarkSword iOS Exploits Proliferate Globally

Sophisticated iPhone exploit chains, DarkSword and Coruna, are rapidly spreading beyond nation-state actors and into the hands of organized cybercrime groups. These advanced tools, initially developed for surveillance an…

Dark Reading · Aug 10, 2026 High

CVE-2025-31277CVE-2025-43529CVE-2026-20700CHMASAexploitioscybercrime

All articles mentioning it

Advisories and references

• support.apple.com/en-us/124147
• support.apple.com/en-us/124149
• support.apple.com/en-us/124152
• support.apple.com/en-us/124153
• support.apple.com/en-us/124154
• support.apple.com/en-us/124155
• cloud.google.com/blog/topics/threat-intelligence/darksword-ios-explo...
• cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-...
• seclists.org/fulldisclosure/2025/Aug/0
• seclists.org/fulldisclosure/2025/Jul/36