Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-30466 EUVD-2025-16423GHSA-m66r-fg5x-99cr

This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.…

Published May 29, 2025 · Updated Apr 2, 2026 · Assigned by apple

Vendor: Apple Product: iOS and iPadOS Product: macOS Product: Safari Product: visionOS Platform: iOS Platform: macOS Category: Browsers

Description

This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4. A website may be able to bypass Same Origin Policy.

Affected products

VendorProductAffectedFixed
Apple Safari < 18.4 18.4
Apple iOS and iPadOS < 18.4 18.4
Apple macOS < 15.4 15.4
Apple visionOS < 2.4 2.4

Advisories 2

References