Apple Multiple Products Use-After-Free WebKit Vulnerability

Apple Multiple Products

Apple iOS, iPadOS, macOS, and other Apple products contain a use-after-free vulnerability in WebKit. Processing maliciously crafted web content may lead to memory corruption. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. Added to CISA KEV on 2025-12-15 (federal deadline 2026-01-05).

First seen: 15 Dec 2025
Last update: 15 Dec 2025, 12:00 UTC
Identifiers: CVE-2025-43529
Source: CISA KEV
On the menu as: Apple

Check this repository for exposure to one security incident from pwned.coffee. Report first, change nothing until I say so.

## Apple Multiple Products Use-After-Free WebKit Vulnerability
Severity: high, exploited in the wild. Patch status: patched.
Affected: Apple Multiple Products
Ids: CVE-2025-43529

Apple iOS, iPadOS, macOS, and other Apple products contain a use-after-free vulnerability in WebKit. Processing maliciously crafted web content may lead to memory corruption. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. Added to CISA KEV on 2025-12-15 (federal deadline 2026-01-05).

## Steps
1. Search the repo, its CI and infra config for Apple Multiple Products. If present, report the version in use and whether it's affected.

## Report
A table: file, product or package, version in use, affected yes/no, exact fix. Then anything a human has to check outside the repo.

If you have the pwned.coffee MCP server (https://pwned.coffee/mcp), call lookup_cve("CVE-2025-43529") for the latest, and check_repo with this repo's lockfiles, Dockerfiles and workflows for a full receipt.
Sources: https://nvd.nist.gov/vuln/detail/CVE-2025-43529 https://support.apple.com/en-us/125884 https://support.apple.com/en-us/125885 https://support.apple.com/en-us/125886 https://support.apple.com/en-us/125889 https://support.apple.com/en-us/125892
https://pwned.coffee/i/apple-multiple-products-use-after-free-webkit-vulnerabil-cve-2025-43529

Sources

Totalone hot coffee