CVE-2025-43227

Description

This issue was addressed through improved state management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may disclose sensitive user information.

References

https://www.malwarebytes.com/blog/news/2025/07/apple-patches-multiple-vulnerabilities-in-ios-and-ipados-update-now

https://support.apple.com/en-us/124155

https://support.apple.com/en-us/124154

https://support.apple.com/en-us/124153

https://support.apple.com/en-us/124152

https://support.apple.com/en-us/124149

https://support.apple.com/en-us/124147

https://lists.debian.org/debian-lts-announce/2025/08/msg00015.html

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-23106

http://www.openwall.com/lists/oss-security/2025/08/02/1

http://seclists.org/fulldisclosure/2025/Jul/36

http://seclists.org/fulldisclosure/2025/Jul/35

http://seclists.org/fulldisclosure/2025/Jul/32

http://seclists.org/fulldisclosure/2025/Jul/30

http://seclists.org/fulldisclosure/2025/Aug/0

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS