CVE-2025-30466

Description

This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, visionOS 2.4, macOS Sequoia 15.4. A website may be able to bypass Same Origin Policy.

Reserved 2025-03-22 | Published 2025-05-29 | Updated 2025-05-30 | Assigner apple

Problem types

A website may be able to bypass Same Origin Policy

Product status

Any version before 18.4
affected

Any version before 15.4
affected

Any version before 2.4
affected

Any version before 18.4
affected

References

support.apple.com/en-us/122371

support.apple.com/en-us/122373

support.apple.com/en-us/122378

support.apple.com/en-us/122379

cve.org (CVE-2025-30466)

nvd.nist.gov (CVE-2025-30466)

Download JSON