CVE-2025-43480

HOCH 8.1CVE-2025-43480 · Published 04/11/2025 · updated 18/10/2026

Kurz gesagt

CVE-2025-43480 ist eine Schwachstelle (HOCH (CVSS 8.1)) in safari (apple).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.49%, höher als bei 42.2% aller Schwachstellen.
Abhilfe: auf 26.1 oder neuer aktualisieren.

Package	Affected versions	Patched versions
safari apple	`< 26.1`	`26.1`

Description

The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious website may exfiltrate data cross-origin.

References

support.apple.com/en-us/125632 · Release Notes
support.apple.com/en-us/125634
support.apple.com/en-us/125637 · Release Notes
support.apple.com/en-us/125638 · Release Notes
support.apple.com/en-us/125639 · Release Notes
support.apple.com/en-us/125640 · Release Notes

Weitere Schwachstellen in safari

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

safari

apple

< 26.1

26.1

Weitere Schwachstellen in safari

Alle anzeigen →