CVE-2025-30425

Details

This issue was addressed through improved state management. This issue is fixed in tvOS 18.4, Safari 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A malicious website may be able to track users in Safari private browsing mode.

Affected Packages

macOS:15macOS

Fixed in:

15.4

References

WEBhttp://seclists.org/fulldisclosure/2025/Apr/11 WEBhttp://seclists.org/fulldisclosure/2025/Apr/13 WEBhttp://seclists.org/fulldisclosure/2025/Apr/2 WEBhttp://seclists.org/fulldisclosure/2025/Apr/4 WEBhttp://seclists.org/fulldisclosure/2025/Apr/5 WEBhttp://seclists.org/fulldisclosure/2025/Apr/8 WEBhttps://support.apple.com/en-us/122371 WEBhttps://support.apple.com/en-us/122372 WEBhttps://support.apple.com/en-us/122373 WEBhttps://support.apple.com/en-us/122377 WEBhttps://support.apple.com/en-us/122379 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-30425

CVE-2025-30425

Details

Affected Packages

References

CVSS Analysis

Ecosystems

Timeline