CVE-2025-43229
This issue was addressed through improved state management
Medium · published July 29, 2025
What it is
This issue was addressed through improved state management. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. Processing maliciously crafted web content may lead to universal cross site scripting.
The record
Technical detail
- CVSS v3.1
- 6.1 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00332 · 25.2th percentile
- Published
- 2025-07-29T23:29Z
EPSS history
Timeline