Medium · 6.1 CVE-2025-43229 EUVD-2025-23054GHSA-95cp-j893-h7c8

This issue was addressed through improved state management. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. Processing maliciously …

Published Jul 29, 2025 · Updated Apr 2, 2026 · Assigned by apple

Vendor: Apple Product: macOS Product: Safari Platform: macOS Category: Browsers

Description

This issue was addressed through improved state management. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. Processing maliciously crafted web content may lead to universal cross site scripting.

Affected products

Vendor	Product	Affected	Fixed
Apple	Safari	< 18.6	18.6
Apple	macOS	< 15.6	15.6

Advisories 3

WID-SEC-2025-1672 Apple macOS Sequoia, Sonoma und Ventura: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 14, 2026
WID-SEC-2025-1683 Apple Safari: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 22, 2026
NCSC-2025-0238 Kwetsbaarheden verholpen in Apple macOS, iOS en iPadOS NCSC-NL (Netherlands) · Jul 30, 2025

References

https://support.apple.com/en-us/124149
https://support.apple.com/en-us/124152

EUVD	v3.1	6.1
CISA-ADP	v3.1	6.1