Summary
Apple macOS, iOS, tvOS, Safari, and watchOS contain an unspecified vulnerability in JavaScriptCore that when processing web content may lead to arbitrary code execution. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.
- Vendor
- Apple
- Product
- Multiple Products
- Added to KEV
- Oct 20, 2025
- Remediation due
- Nov 10, 2025 (US federal deadline)
- Ransomware use
- Not known
- EPSS
- 3.2% as of Nov 12
In the news
- No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
- none recorded
References