CVE-2025-31266

Apple / Safari PUBLISHED

Description (CNA)

A spoofing issue was addressed with improved truncation when displaying the fully qualified domain name. This issue is fixed in Safari 18.5, macOS Sequoia 15.5. A website may be able to spoof the domain name in the title of a pop-up window.

Affected (CNA)

Vendor / product	Versions
Apple / Safari	affected 0 before 18.5
Apple / macOS	affected 0 before 15.5

CWE

No CWE identifiers supplied.

References

https://support.apple.com/en-us/122716
https://support.apple.com/en-us/122719

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.