Spoofing Vulnerability in Safari Browser by Apple

CVE-2025-31266

What is CVE-2025-31266?

A vulnerability in the Safari browser allows potential attackers to spoof the domain name displayed in pop-up window titles. This can mislead users into thinking they are interacting with a legitimate website, increasing the risk of phishing and other social engineering attacks. The issue was addressed through improved truncation methods, safeguarding users from deceptive practices that could occur when navigating the web.

References