CVE-2025-43493

EPSS 0.04%
Veröffentlicht 04.11.2025 01:17:45
Zuletzt bearbeitet 17.12.2025 21:16:08
Quelle product-security@apple.com
CVE-Watchlists
Login
Unerledigt
Login

The issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.1. Visiting a malicious website may lead to address bar spoofing.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 8

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD

Diese Information steht angemeldeten Benutzern zur Verfügung.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ Safari Version < 26.1

Apple ≫ iPadOS Version < 26.1

Apple ≫ iPhone OS Version < 26.1

Apple ≫ visionOS Version < 26.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.04%	0.122

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0	4.3	2.8	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

CWE-290 Authentication Bypass by Spoofing

This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

https://support.apple.com/en-us/125632

https://support.apple.com/en-us/125638

https://support.apple.com/en-us/125640

https://support.apple.com/en-us/125633

https://support.apple.com/en-us/125634

https://nvd.nist.gov/vuln/detail/CVE-2025-43493

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-43493

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-43493

EUVD