Week 38, 2025
7 WebKit CVEs disclosed in the week of September 15, 2025 (ISO week 38). 7 have a public fix commit; 0 embargoed.
| Severity | Count |
|---|---|
| Medium | 7 |
By component: WebKit (3), WebCore (2), JSC (2)
By bug class: LogicError (2), TypeConfusion (2), OOB (1), Other (1), UAF (1)
| CVE | Bugzilla | Component | Class | Severity | Fix |
|---|---|---|---|---|---|
| CVE-2025-43419 | 293895 | WebKit | Other | medium | commit |
| CVE-2025-43376 | 295943 | WebCore | LogicError | medium | commit |
| CVE-2025-43368 | 296276 | WebKit | UAF | medium | commit |
| CVE-2025-43356 | 296153 | WebKit | LogicError | medium | commit |
| CVE-2025-43343 | 296490 | JSC | TypeConfusion | medium | commit |
| CVE-2025-43342 | 296042 | JSC | TypeConfusion | medium | commit |
| CVE-2025-43272 | 294550 | WebCore | OOB | medium | commit |