Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2025-24208

A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4. Loading a malicious iframe may lead to a cross-site sc

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
apple

Description

A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4. Loading a malicious iframe may lead to a cross-site scripting attack.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apple Safari

  • 0 to < 18.4affected

Apple iOS and iPadOS

  • 0 to < 18.4affected

References