CVE-2025-31205

Description

The issue was addressed with improved checks. This issue is fixed in watchOS 11.5, tvOS 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. A malicious website may exfiltrate data cross-origin.

References

https://support.apple.com/en-us/122722

https://support.apple.com/en-us/122721

https://support.apple.com/en-us/122720

https://support.apple.com/en-us/122719

https://support.apple.com/en-us/122716

https://support.apple.com/en-us/122404

https://lists.debian.org/debian-lts-announce/2025/06/msg00016.html

http://seclists.org/fulldisclosure/2025/May/7

http://seclists.org/fulldisclosure/2025/May/5

http://seclists.org/fulldisclosure/2025/May/13

http://seclists.org/fulldisclosure/2025/May/12

http://seclists.org/fulldisclosure/2025/May/10

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS