CVE-2025-30466

critical · 9.8

This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4. A website may be able to bypass Same Origin Policy.

9.8

CVSS

0.3%

EPSS (exploit prob.)

23rd

EPSS percentile

2025-05-29

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-346

Affected products

Vendor	Product	Affected versions
apple	safari	< 18.4
apple	ipados	< 18.4
apple	iphone_os	< 18.4
apple	macos	< 15.4
apple	visionos	< 2.4

Check a specific version with /api/v1/cve/match.

References

https://support.apple.com/en-us/122371
https://support.apple.com/en-us/122373
https://support.apple.com/en-us/122378
https://support.apple.com/en-us/122379

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-30466