CVE-2025-24128

Summary

CVE-2025-24128 is a vulnerability affecting macOS, iOS, and iPadOS that allows for address bar spoofing. Malicious websites can exploit this issue, potentially tricking users into entering sensitive information. Apple addressed this vulnerability by adding additional logic in macOS Sequoia 15.3, Safari 18.3, iOS 18.3, and iPadOS 18.3. Users are advised to update their systems to mitigate the risk. This issue may pose a significant security concern for those who frequently visit untrusted websites.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.