CVE-2025-31205

CVE Database · CVE-2025-31205

CVE-2025-31205

· MEDIUMModified

CVSS v3.1

6.5

EPSS

0.37%

Published

May 12, 2025

Modified

Apr 2, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. A malicious website may exfiltrate data cross-origin.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-352

Affected Products (7)

apple · safari (up to 18.5)vulnerable

apple · ipados (up to 18.5)vulnerable

apple · iphone_os (up to 18.5)vulnerable

apple · macos (up to 15.5)vulnerable

apple · tvos (up to 18.5)vulnerable

apple · visionos (up to 2.5)vulnerable

apple · watchos (up to 11.5)vulnerable

References (12)

https://support.apple.com/en-us/122404

Release NotesVendor Advisory

https://support.apple.com/en-us/122716

Release NotesVendor Advisory

https://support.apple.com/en-us/122719

Release NotesVendor Advisory

https://support.apple.com/en-us/122720

Release NotesVendor Advisory

https://support.apple.com/en-us/122721

Release NotesVendor Advisory

https://support.apple.com/en-us/122722

KEV Catalog EPSS Scores Vendors All CVEs