Product:
Safari
Summary
The issue was addressed by adding additional logic. This issue is fixed in Safari 26 and macOS Tahoe 26. Visiting a malicious website may lead to address bar spoofing.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2025-43327 |
Exploitation
An attacker can exploit this vulnerability by crafting a malicious website that, when visited by a user, can manipulate the address bar to display misleading information. This could trick users into believing they are on a legitimate site, potentially leading to credential theft or other malicious activities.
Affected Products
- Safari 26: The latest version that addresses the vulnerability.
- macOS Tahoe 26: The operating system version that includes the fix for the issue.
Mitigation
To mitigate this vulnerability, users should ensure they are using the latest version of Safari and macOS. Regularly updating software can help protect against known vulnerabilities and exploits.