Week 45, 2025
19 WebKit CVEs disclosed in the week of November 3, 2025 (ISO week 45). 16 have a public fix commit; 3 embargoed.
| Severity | Count |
|---|---|
| Medium | 19 |
By component: JSC (12), WebCore (4), WebKit (3)
By bug class: LogicError (7), UAF (6), CrossOrigin (2), OOB (2), TypeConfusion (1), IntegerOverflow (1)
| CVE | Bugzilla | Component | Class | Severity | Fix |
|---|---|---|---|---|---|
| CVE-2025-43511 | 300926 | WebCore | UAF | medium | commit |
| CVE-2025-43480 | 276208 | WebCore | CrossOrigin | medium | commit |
| CVE-2025-43458 | 296693 | WebKit | LogicError | medium | embargoed |
| CVE-2025-43457 | 298606 | JSC | UAF | medium | commit |
| CVE-2025-43443 | 299843 | WebKit | LogicError | medium | embargoed |
| CVE-2025-43441 | 298496 | JSC | LogicError | medium | commit |
| CVE-2025-43440 | 298126 | JSC | LogicError | medium | commit |
| CVE-2025-43438 | 297662 | JSC | TypeConfusion | medium | commit |
| CVE-2025-43435 | 299391 | WebCore | UAF | medium | commit |
| CVE-2025-43434 | 297958 | JSC | UAF | medium | commit |
| CVE-2025-43433 | 298093 | WebKit | LogicError | medium | embargoed |
| CVE-2025-43432 | 299313 | JSC | UAF | medium | commit |
| CVE-2025-43431 | 298194 | JSC | UAF | medium | commit |
| CVE-2025-43430 | 298196 | JSC | LogicError | medium | commit |
| CVE-2025-43429 | 298232 | JSC | IntegerOverflow | medium | commit |
| CVE-2025-43427 | 298628 | JSC | OOB | medium | commit |
| CVE-2025-43425 | 298851 | JSC | LogicError | medium | commit |
| CVE-2025-43421 | 300718 | JSC | OOB | medium | commit |
| CVE-2025-43392 | 297566 | WebCore | CrossOrigin | medium | commit |