CVE-2025-24128

Details

The issue was addressed by adding additional logic. This issue is fixed in macOS Sequoia 15.3, Safari 18.3, iOS 18.3 and iPadOS 18.3. Visiting a malicious website may lead to address bar spoofing.

Affected Packages

macOS:15macOS

Fixed in:

15.3

References

WEBhttp://seclists.org/fulldisclosure/2025/Jan/13 WEBhttp://seclists.org/fulldisclosure/2025/Jan/15 WEBhttp://seclists.org/fulldisclosure/2025/Jan/20 WEBhttps://support.apple.com/en-us/122066 WEBhttps://support.apple.com/en-us/122068 WEBhttps://support.apple.com/en-us/122074 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-24128

CVE-2025-24128

Details

Affected Packages

References

CVSS Analysis

Ecosystems

Timeline