CVE-2025-24167

This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, watchOS 11.4. A download's origin may be incorrectly associated.

Score

CVSS 3.1 9.8 Critical

Status

Modified - product-security@apple.com

Published

2025-03-31

Last modified

2026-07-23

Affected products

• Ios And Ipados (Apple)
• Ipados (Apple)
• Iphone Os (Apple)
• Macos (Apple)
• Safari (Apple)
• Watchos (Apple)

References

• https://support.apple.com/en-us/122371
• https://support.apple.com/en-us/122373
• https://support.apple.com/en-us/122376
• https://support.apple.com/en-us/122379
• http://seclists.org/fulldisclosure/2025/Apr/13
• http://seclists.org/fulldisclosure/2025/Apr/2
• http://seclists.org/fulldisclosure/2025/Apr/4
• http://seclists.org/fulldisclosure/2025/Apr/8