CVE-2025-30425
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Mar 31, 2025
Updated: Apr 7, 2025
CWE ID 284
Summary
CVE-2025-30425 is a vulnerability affecting Safari browsing in macOS, tvOS, iPadOS, and iOS. Malicious websites could bypass users' privacy settings in Safari's private browsing mode, enabling unwanted tracking. Apple resolved this issue by enhancing state management. Users are advised to update their devices to the latest versions – tvOS 18.4, Safari 18.4, iPadOS 17.7.6, iOS 18.4, and iPadOS 18.4 – to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.