CVE-2025-43228

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-43228
The issue was addressed with improved UI. This issue is fixed in iOS 18.6 and iPadOS 18.6, Safari 18. 6. Visiting a malicious website may lead to address bar spoofing.

4.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://support.apple.com/en-us/124147 Release Notes Vendor Advisory
https://support.apple.com/en-us/124152 Release Notes Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
History

04 Aug 2025, 19:15

Type Values Removed Values Added
CWE CWE-451

01 Aug 2025, 14:35

Type Values Removed Values Added
References () https://support.apple.com/en-us/124147 - () https://support.apple.com/en-us/124147 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/124152 - () https://support.apple.com/en-us/124152 - Release Notes, Vendor Advisory
CWE NVD-CWE-noinfo
CPE cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
First Time Apple
Apple ipados
Apple iphone Os
Apple safari

30 Jul 2025, 23:15

Type Values Removed Values Added
References
  • () https://support.apple.com/en-us/124152 -
Summary (en) The issue was addressed with improved UI. This issue is fixed in iOS 18.6 and iPadOS 18.6. Visiting a malicious website may lead to address bar spoofing. (en) The issue was addressed with improved UI. This issue is fixed in iOS 18.6 and iPadOS 18.6, Safari 18. 6. Visiting a malicious website may lead to address bar spoofing.

30 Jul 2025, 18:15

Type Values Removed Values Added
Summary
  • (es) El problema se solucionó con una interfaz de usuario mejorada. Este problema está corregido en iOS 18.6 y iPadOS 18.6. Visitar un sitio web malicioso puede provocar la suplantación de la barra de direcciones.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.3

30 Jul 2025, 00:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-30 00:15

Updated : 2025-08-04 19:15

NVD link : CVE-2025-43228

Mitre link : CVE-2025-43228

CVE.ORG link : CVE-2025-43228

JSON object : View

Products Affected

apple

  • ipados
  • safari
  • iphone_os
CWE
NVD-CWE-noinfo CWE-451

User Interface (UI) Misrepresentation of Critical Information