CVE-2025-24167

Summary

This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, watchOS 11.4. A download's origin may be incorrectly associated.

Affected Software

Weaknesses

• A download's origin may be incorrectly associated

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: total

CVE Program Container

Additional References

• http://seclists.org/fulldisclosure/2025/Apr/13
• http://seclists.org/fulldisclosure/2025/Apr/8
• http://seclists.org/fulldisclosure/2025/Apr/4
• http://seclists.org/fulldisclosure/2025/Apr/2

References

• https://support.apple.com/en-us/122371
• https://support.apple.com/en-us/122373
• https://support.apple.com/en-us/122376
• https://support.apple.com/en-us/122379

• ←Previous
• Next→