UI Spoofing Vulnerability in Apple iOS and iPadOS
CVE-2025-43228

4.3MEDIUM

Key Information:

Vendor

Apple
Status
Safari
iOS And iPad OS
Vendor
CVE Published:
30 July 2025

What is CVE-2025-43228?

A vulnerability in Apple's iOS and iPadOS allows for address bar spoofing when users visit malicious websites. This could mislead users about the authenticity of a webpage, potentially enabling phishing attacks and data theft. The issue has been addressed with improvements in the user interface starting from iOS 18.6 and iPadOS 18.6, strengthening protection against such threats.

Affected Version(s)

iOS and iPadOS < 18.6

Safari < 18.6

References

https://support.apple.com/en-us/124152
https://support.apple.com/en-us/124147

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

.
CVE-2025-43228 : UI Spoofing Vulnerability in Apple iOS and iPadOS