CVE-2025-30425

MEDIUM 4.3CVE-2025-30425 · Published 31/03/2025 · updated 17/06/2026

In short

CVE-2025-30425 is a MEDIUM (CVSS 4.3) vulnerability affecting safari (apple).
Chance of exploitation in the next 30 days (EPSS): 0.82%, higher than 57.2% of all vulnerabilities.
Fix: update to 18.4 or later.

Package	Affected versions	Patched versions
safari apple	`< 18.4`	`18.4`

Description

This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, watchOS 11.4. A malicious website may be able to track users in Safari private browsing mode.

References

support.apple.com/en-us/122371 · Vendor Advisory
support.apple.com/en-us/122372 · Vendor Advisory
support.apple.com/en-us/122373 · Vendor Advisory
support.apple.com/en-us/122376
support.apple.com/en-us/122377 · Vendor Advisory
support.apple.com/en-us/122379 · Vendor Advisory
seclists.org/fulldisclosure/2025/Apr/11
seclists.org/fulldisclosure/2025/Apr/13
seclists.org/fulldisclosure/2025/Apr/2
seclists.org/fulldisclosure/2025/Apr/4
seclists.org/fulldisclosure/2025/Apr/5
seclists.org/fulldisclosure/2025/Apr/8

More vulnerabilities in safari

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

safari

apple

< 18.4

18.4

More vulnerabilities in safari

See all →