7.5

CVE-2025-43227

This issue was addressed through improved state management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, watchOS 11.6, visionOS 2.6. Processing maliciously crafted web content may disclose sensitive user information.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ Safari Version < 18.6
Apple ≫ iPadOS Version < 18.6
Apple ≫ iPhone OS Version < 18.6
Apple ≫ macOS Version < 15.6
Apple ≫ tvOS Version < 18.6
Apple ≫ visionOS Version < 2.6
Apple ≫ watchOS Version < 11.6
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.1% 0.284
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-359 Exposure of Private Personal Information to an Unauthorized Actor

The product does not properly prevent a person's private, personal information from being accessed by actors who either (1) are not explicitly authorized to access the information or (2) do not have the implicit consent of the person about whom the information is collected.

https://support.apple.com/en-us/124147
Vendor Advisory
Release Notes
https://support.apple.com/en-us/124149
Vendor Advisory
Release Notes
https://support.apple.com/en-us/124153
Vendor Advisory
Release Notes
https://support.apple.com/en-us/124154
Vendor Advisory
Release Notes
https://support.apple.com/en-us/124155
Vendor Advisory
Release Notes
https://support.apple.com/en-us/124152
Vendor Advisory
Release Notes