CVEvulnerability
CVE-2025-31254
5.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2025-09-15
- Last modified
- 2026-10-18
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
- Weaknesses
- CWE-863
Description
This issue was addressed with improved URL validation. This issue is fixed in Safari 26, iOS 26 and iPadOS 26. Processing maliciously crafted web content may lead to unexpected URL redirection.
Affected configurations
• apple safari (< 26.0)
• apple ipados (< 26.0)
• apple iphone os (< 26.0)
Related
Weakness · CWE (1)
- CWE-863 Incorrect Authorization weakness
References
- https://support.apple.com/en-us/125108 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/125113 Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2025/Sep/59 seclists.org