Cross-Origin Data Exfiltration Vulnerability in Apple Products

CVE-2025-43480

What is CVE-2025-43480?

A significant vulnerability exists within Apple's Safari browser and various operating systems that enables a malicious website to exfiltrate sensitive data across different origins. This security flaw arises from inadequate validation checks, allowing attackers to potentially gain unauthorized access to user information from other domains. Apple has addressed this issue in the latest updates of Safari and compatible operating systems, ensuring enhanced security measures are in place.

References