UI Spoofing Vulnerability in Apple iOS and iPadOS
CVE-2025-43228

Currently unrated

Key Information:

Vendor

Apple
Status
iOS and iPadOS
Vendor
CVE Published:
30 July 2025

What is CVE-2025-43228?

A vulnerability in Apple's iOS and iPadOS allows for address bar spoofing when users visit malicious websites. This could mislead users about the authenticity of a webpage, potentially enabling phishing attacks and data theft. The issue has been addressed with improvements in the user interface starting from iOS 18.6 and iPadOS 18.6, strengthening protection against such threats.

References

https://support.apple.com/en-us/124147

Timeline

  • Vulnerability published

.