CVEvulnerability
CVE-2025-43229
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2025-07-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Weaknesses
- CWE-79
Description
This issue was addressed through improved state management. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. Processing maliciously crafted web content may lead to universal cross site scripting.
Affected configurations
• apple safari (< 18.6)
• apple macos (< 15.6)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://support.apple.com/en-us/124149 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/124152 Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2025/Aug/0 seclists.org
- http://seclists.org/fulldisclosure/2025/Jul/32 seclists.org