Address Bar Spoofing Vulnerability in Safari and Apple Devices
CVE-2025-30467
Currently unrated
Summary
A security issue in Safari and various Apple operating systems allows attackers to conduct address bar spoofing via malicious websites. This vulnerability could mislead users into believing they are interacting with legitimate websites, exposing them to potential phishing attacks. Apple has addressed this issue by implementing improved checks in recent updates for Safari and its other operating systems, including iOS, iPadOS, and macOS Sequoia.
Affected Version(s)
iOS and iPadOS < 18.4
macOS < 15.4
Safari < 18.4
References
Timeline
Vulnerability published
Vulnerability Reserved