CVE-2025-43228

Description

The issue was addressed with improved UI. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6. Visiting a malicious website may lead to address bar spoofing.

PUBLISHED Reserved 2025-04-16 | Published 2025-07-29 | Updated 2026-04-02 | Assigner apple

Problem types

Visiting a malicious website may lead to address bar spoofing

Product status

References

lists.debian.org/debian-lts-announce/2025/08/msg00015.html

seclists.org/fulldisclosure/2025/Aug/0

seclists.org/fulldisclosure/2025/Jul/30

www.openwall.com/lists/oss-security/2025/08/02/1

support.apple.com/en-us/124147

support.apple.com/en-us/124152

cve.org (CVE-2025-43228)

nvd.nist.gov (CVE-2025-43228)

Download JSON