CVE-2025-31266: A spoofing issue was addressed with improved truncation when displaying the fully qualified domain name. This issue is fixed in Safari 18.5, macOS Sequoia…

medium4.3CVSS 3.1

AVNACLPRNUIRSUCNINAL

A spoofing issue was addressed with improved truncation when displaying the fully qualified domain name. This issue is fixed in Safari 18.5, macOS Sequoia 15.5. A website may be able to spoof the domain name in the title of a pop-up window.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
apple	macos	< 15.5	15.5
apple	macos_sequoia	—	—
apple	safari	< 18.5	18.5
apple	safari	—	—