Description
A spoofing issue was addressed with improved truncation when displaying the fully qualified domain name. This issue is fixed in Safari 18.5, macOS Sequoia 15.5. A website may be able to spoof the domain name in the title of a pop-up window.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apple | Safari | < 18.5 | 18.5 |
| Apple | macOS | < 15.5 | 15.5 |
Advisories 1
- WID-SEC-2025-1007 Apple macOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 23, 2025