CVEvulnerability
CVE-2025-43493
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2025-11-04
- Last modified
- 2026-09-26
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
- Weaknesses
- CWE-290
Description
The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1. Visiting a malicious website may lead to address bar spoofing.
Affected configurations
• apple safari (< 26.1)
• apple ipados (< 26.1)
• apple iphone os (< 26.1)
• apple visionos (< 26.1)
Related
Weakness · CWE (1)
- CWE-290 Authentication Bypass by Spoofing weakness
References
- https://support.apple.com/en-us/125632 support.apple.com
- https://support.apple.com/en-us/125633 support.apple.com
- https://support.apple.com/en-us/125634 support.apple.com
- https://support.apple.com/en-us/125638 support.apple.com
- https://support.apple.com/en-us/125640 support.apple.com