CVE-2025-43228 — User Interface (UI) Misrepresentation of Critical Information in Apple IOS AND Ipados

CWE-451 — User Interface (UI) Misrepresentation of Critical Information10 documents8 sources
Severity
4.3MEDIUMNVD
EPSS
0.1%
top 81.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Apple IOS AND IpadosApple SafariApple Ipados+1 more
Timeline
PublishedJul 30
Latest updateAug 19

Description

The issue was addressed with improved UI. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6. Visiting a malicious website may lead to address bar spoofing.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages5 packages

▶CVEListV5apple/safari< 18.6
▶NVDapple/ipados< 18.6
▶NVDapple/safari< 18.6
▶CVEListV5apple/ios_and_ipados< 18.6
▶NVDapple/iphone_os< 18.6

🔴Vulnerability Details

4
OSV
CVE-2025-43228: The issue was addressed with improved UI↗2025-07-30
▶
OSV
CVE-2025-43228: The issue was addressed with improved UI↗2025-07-30
▶
GHSA
GHSA-wjrj-j5jq-gmmx: The issue was addressed with improved UI↗2025-07-30
▶
CVEList
CVE-2025-43228: The issue was addressed with improved UI↗2025-07-29
▶

📋Vendor Advisories

5
Ubuntu
WebKitGTK vulnerabilities↗2025-08-19
▶
Red Hat
webkitgtk: Visiting a malicious website may lead to address bar spoofing↗2025-08-01
▶
Apple
CVE-2025-43228: Safari 18.6↗2025-07-30
▶
Apple
CVE-2025-43228: iOS 18.6 and iPadOS 18.6↗2025-07-29
▶
Debian
CVE-2025-43228: webkit2gtk - The issue was addressed with improved UI. This issue is fixed in Safari 18.6, iO...↗2025
▶
CVE-2025-43228 — Apple IOS AND Ipados vulnerability | cvebase