Description
The issue was addressed with improved checks. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, watchOS 11.4. Visiting a malicious website may lead to address bar spoofing.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Apple Safari
0 to < 18.4affected
Apple iOS and iPadOS
0 to < 18.4affected
Apple macOS
0 to < 15.4affected
Apple watchOS
0 to < 11.4affected
References
- https://support.apple.com/en-us/122371 ↗
- https://support.apple.com/en-us/122373 ↗
- https://support.apple.com/en-us/122376 ↗
- https://support.apple.com/en-us/122379 ↗
- http://seclists.org/fulldisclosure/2025/Apr/13 ↗
- http://seclists.org/fulldisclosure/2025/Apr/8 ↗
- http://seclists.org/fulldisclosure/2025/Apr/4 ↗
- http://seclists.org/fulldisclosure/2025/Apr/2 ↗