CVE-2025-24113

EPSS 0.09%
Veröffentlicht 27.01.2025 22:15:16
Zuletzt bearbeitet 31.01.2025 22:15:13
Quelle product-security@apple.com
Teams Watchlist Login
Unerledigt Login

The issue was addressed with improved UI. This issue is fixed in macOS Sequoia 15.3, Safari 18.3, iOS 18.3 and iPadOS 18.3, visionOS 2.3. Visiting a malicious website may lead to user interface spoofing.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ Safari Version < 18.3

Apple ≫ iPadOS Version < 18.3

Apple ≫ iPhone OS Version < 18.3

Apple ≫ macOS Version < 15.3

Apple ≫ visionOS Version < 2.3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.09%	0.262

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	2.8	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
134c704f-9b21-4f2e-91b3-4a467353bcc0	4.3	2.8	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

https://support.apple.com/en-us/122066

Vendor Advisory

Release Notes

https://support.apple.com/en-us/122068

Vendor Advisory

Release Notes

https://support.apple.com/en-us/122073

Vendor Advisory

Release Notes

https://support.apple.com/en-us/122074

Vendor Advisory

Release Notes

https://nvd.nist.gov/vuln/detail/CVE-2025-24113

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-24113

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-24113

EUVD