CVE-2025-24201Vulnerability
Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability
Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .
Reported by 1 independent source · first reported by The Hacker News · last reported
Last reported 15 days ago
CISA KEVAdded 13 Mar 2025
Fix due 3 Apr 2025
Used by ransomware: not knownCISA KEV catalogue
Fix due 3 Apr 2025
Used by ransomware: not knownCISA KEV catalogue
EPSS3.8%
higher than 90% of CVEsFIRST EPSS, as of 23 Oct 2026
higher than 90% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
1 report, newest first · the exact sentence from each-
P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands“CVE-2025-24201, an out-of-bounds write vulnerability in the WebKit engine that could allow an attacker to break out of the Web Content sandbox (Fixed in iOS 18.3.2 and iPadOS 18.3.2)”
Indicators reported together
named in the same reports- 166.88.95[.]90in 1 report
- 43.134.165[.]205in 1 report
- 183.154.173[.]30in 1 report
- 182.239.114[.]223in 1 report
- 23.148.212[.]237in 1 report
- 47.102.192[.]23in 1 report
- 156.239.230[.]120in 1 report
- 66ds[.]lolin 1 report
Copy these 8 indicators · defanged
Also named with it: CVE-2026-31001, CVE-2025-31200
Thanks — we review every report.