We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2025-24208



Description

A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4. Loading a malicious iframe may lead to a cross-site scripting attack.

Reserved 2025-01-17 | Published 2025-03-31 | Updated 2025-04-01 | Assigner apple

Problem types

Loading a malicious iframe may lead to a cross-site scripting attack

Product status

Any version before 18.4
affected

Any version before 18.4
affected

References

support.apple.com/en-us/122371

support.apple.com/en-us/122379

cve.org (CVE-2025-24208)

nvd.nist.gov (CVE-2025-24208)

Download JSON

Share this page
https://cve.threatint.eu/CVE/CVE-2025-24208

Support options

Helpdesk Chat, Email, Knowledgebase