Week 20, 2025
10 WebKit CVEs disclosed in the week of May 12, 2025 (ISO week 20). 9 have a public fix commit; 1 embargoed.
| Severity | Count |
|---|---|
| Medium | 10 |
By component: WebCore (4), JSC (4), WebKit (2)
By bug class: TypeConfusion (3), UAF (2), OOB (2), IntegerOverflow (1), LogicError (1), CrossOrigin (1)
| CVE | Bugzilla | Component | Class | Severity | Fix |
|---|---|---|---|---|---|
| CVE-2025-31257 | 290985 | WebCore | UAF | medium | commit |
| CVE-2025-31238 | 289653 | WebCore | UAF | medium | commit |
| CVE-2025-31223 | 289387 | JSC | IntegerOverflow | medium | commit |
| CVE-2025-31217 | 289677 | WebKit | OOB | medium | commit |
| CVE-2025-31215 | 288814 | JSC | TypeConfusion | medium | commit |
| CVE-2025-31206 | 290834 | JSC | TypeConfusion | medium | commit |
| CVE-2025-31205 | 290992 | WebCore | CrossOrigin | medium | commit |
| CVE-2025-31204 | 291506 | JSC | OOB | medium | commit |
| CVE-2025-24223 | 287577 | WebKit | LogicError | medium | embargoed |
| CVE-2025-24213 | 286694 | WebCore | TypeConfusion | medium | commit |