Week 31, 2025
13 WebKit CVEs disclosed in the week of July 28, 2025 (ISO week 31). 13 have a public fix commit; 0 embargoed.
| Severity | Count |
|---|---|
| Medium | 13 |
By component: JSC (8), WebKit (3), WTF (1), WebCore (1)
By bug class: LogicError (3), CrossOrigin (2), Bypass (2), TypeConfusion (2), OOB (2), IntegerOverflow (1), UAF (1)
| CVE | Bugzilla | Component | Class | Severity | Fix |
|---|---|---|---|---|---|
| CVE-2025-43265 | 294182 | JSC | OOB | medium | commit |
| CVE-2025-43240 | 293994 | WebKit | CrossOrigin | medium | commit |
| CVE-2025-43229 | 285927 | WebKit | CrossOrigin | medium | commit |
| CVE-2025-43228 | 294374 | WebKit | Bypass | medium | commit |
| CVE-2025-43227 | 292888 | WTF | Bypass | medium | commit |
| CVE-2025-43216 | 295382 | WebCore | UAF | medium | commit |
| CVE-2025-43214 | 292599 | JSC | IntegerOverflow | medium | commit |
| CVE-2025-43213 | 292621 | JSC | LogicError | medium | commit |
| CVE-2025-43212 | 293197 | JSC | LogicError | medium | commit |
| CVE-2025-43211 | 293730 | JSC | LogicError | medium | commit |
| CVE-2025-31278 | 291742 | JSC | TypeConfusion | medium | commit |
| CVE-2025-31277 | 291745 | JSC | TypeConfusion | medium | commit |
| CVE-2025-31273 | 293579 | JSC | OOB | medium | commit |