Medium · 5.4 CVE-2025-31254 EUVD-2025-29346GHSA-gmw7-26j8-4983

This issue was addressed with improved URL validation. This issue is fixed in Safari 26, iOS 26 and iPadOS 26. Processing maliciously craft…

Published Sep 15, 2025 · Updated Apr 2, 2026 · Assigned by apple

Vendor: Apple Product: iOS and iPadOS Product: Safari Platform: iOS Category: Browsers

Description

This issue was addressed with improved URL validation. This issue is fixed in Safari 26, iOS 26 and iPadOS 26. Processing maliciously crafted web content may lead to unexpected URL redirection.

Affected products

Vendor	Product	Affected	Fixed
Apple	Safari	< 26	26
Apple	iOS and iPadOS	< 26	26

Advisories 3

WID-SEC-2025-2058 Apple Safari: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 4, 2025
WID-SEC-2025-2061 Apple iOS und iPadOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 16, 2025
NCSC-2025-0291 Kwetsbaarheden verholpen in Apple iOS en iPadOS NCSC-NL (Netherlands) · Sep 16, 2025

References

https://support.apple.com/en-us/125108
https://support.apple.com/en-us/125113

EUVD	v3.1	5.4
CISA-ADP	v3.1	5.4