CVE-2025-30425

Description

This issue was addressed through improved state management. This issue is fixed in tvOS 18.4, Safari 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A malicious website may be able to track users in Safari private browsing mode.

References

https://support.apple.com/en-us/122379

https://support.apple.com/en-us/122377

https://support.apple.com/en-us/122373

https://support.apple.com/en-us/122372

https://support.apple.com/en-us/122371

http://seclists.org/fulldisclosure/2025/Apr/8

http://seclists.org/fulldisclosure/2025/Apr/5

http://seclists.org/fulldisclosure/2025/Apr/4

http://seclists.org/fulldisclosure/2025/Apr/2

http://seclists.org/fulldisclosure/2025/Apr/13

http://seclists.org/fulldisclosure/2025/Apr/11

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS