Week 14, 2025
6 WebKit CVEs disclosed in the week of March 31, 2025 (ISO week 14). 6 have a public fix commit; 0 embargoed.
| Severity | Count |
|---|---|
| Medium | 6 |
By component: WebCore (3), WebKit (2), JSC (1)
By bug class: LogicError (2), UAF (2), OOB (1), CrossOrigin (1)
| CVE | Bugzilla | Component | Class | Severity | Fix |
|---|---|---|---|---|---|
| CVE-2025-30427 | 285643 | JSC | UAF | medium | commit |
| CVE-2025-30425 | 286580 | WebCore | LogicError | medium | commit |
| CVE-2025-24264 | 285892 | WebKit | LogicError | medium | commit |
| CVE-2025-24216 | 284055 | WebCore | UAF | medium | commit |
| CVE-2025-24209 | 286462 | WebCore | OOB | medium | commit |
| CVE-2025-24208 | 286381 | WebKit | CrossOrigin | medium | commit |