vulnerability

Apple Safari security update for CVE-2025-24180

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:C/I:C/A:N)

Published

Apr 1, 2025

Added

Apr 1, 2025

Modified

Apr 6, 2026

Description

The issue was addressed with improved input validation. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4, watchOS 11.4. A malicious website may be able to claim WebAuthn credentials from another website that shares a registrable suffix.

Solutions

apple-safari-upgrade-18_4apple-safari-windows-uninstall

References

CVE-2025-24180
https://attackerkb.com/topics/CVE-2025-24180
CWE-601
EUVD-EUVD-2025-9009
http://support.apple.com/en-us/122379
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-9009

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report