CVE-2025-24192

Description

A script imports issue was addressed with improved isolation. This issue is fixed in Safari 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Visiting a website may leak sensitive data.

Reserved 2025-01-17 | Published 2025-03-31 | Updated 2025-04-01 | Assigner apple

Problem types

Visiting a website may leak sensitive data

Product status

Any version before 18.4
affected

Any version before 15.4
affected

Any version before 2.4
affected

Any version before 18.4
affected

References

support.apple.com/en-us/122371

support.apple.com/en-us/122373

support.apple.com/en-us/122378

support.apple.com/en-us/122379

cve.org (CVE-2025-24192)

nvd.nist.gov (CVE-2025-24192)

Download JSON