CVE-2025-24180

ALTO 8.1CVE-2025-24180 · Published 31/03/2025 · updated 17/06/2026

Em resumo

CVE-2025-24180 é uma vulnerabilidade ALTO (CVSS 8.1) que afeta safari (apple).
Chance de exploração nos próximos 30 dias (EPSS): 1.0%, maior que 64.0% das vulnerabilidades.
Correção: atualize para 18.4 ou posterior.

Package	Affected versions	Patched versions
safari apple	`< 18.4`	`18.4`

Description

The issue was addressed with improved input validation. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4, watchOS 11.4. A malicious website may be able to claim WebAuthn credentials from another website that shares a registrable suffix.

References

support.apple.com/en-us/122371 · Vendor Advisory
support.apple.com/en-us/122373 · Vendor Advisory
support.apple.com/en-us/122376
support.apple.com/en-us/122378 · Vendor Advisory
support.apple.com/en-us/122379 · Vendor Advisory
seclists.org/fulldisclosure/2025/Apr/12
seclists.org/fulldisclosure/2025/Apr/13
seclists.org/fulldisclosure/2025/Apr/2
seclists.org/fulldisclosure/2025/Apr/4
seclists.org/fulldisclosure/2025/Apr/8

Mais vulnerabilidades de safari

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

safari

apple

< 18.4

18.4

Mais vulnerabilidades de safari

Ver tudo →