CVE-2025-24113

EPSS 0.09%
Published 27.01.2025 22:15:16
Last modified 31.01.2025 22:15:13
Source product-security@apple.com
Teams watchlist Login
Open Login

The issue was addressed with improved UI. This issue is fixed in macOS Sequoia 15.3, Safari 18.3, iOS 18.3 and iPadOS 18.3, visionOS 2.3. Visiting a malicious website may lead to user interface spoofing.

Affected products Warnungen 0 Metrics 3 CWE 0 References 7

Data is provided by the National Vulnerability Database (NVD)

Apple ≫ Safari Version < 18.3

Apple ≫ iPadOS Version < 18.3

Apple ≫ iPhone OS Version < 18.3

Apple ≫ macOS Version < 15.3

Apple ≫ visionOS Version < 2.3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.09%	0.262

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.3	2.8	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
134c704f-9b21-4f2e-91b3-4a467353bcc0	4.3	2.8	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

https://support.apple.com/en-us/122066

Vendor Advisory

Release Notes

https://support.apple.com/en-us/122068

Vendor Advisory

Release Notes

https://support.apple.com/en-us/122073

Vendor Advisory

Release Notes

https://support.apple.com/en-us/122074

Vendor Advisory

Release Notes

https://nvd.nist.gov/vuln/detail/CVE-2025-24113

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-24113

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-24113

EUVD