Medium severity6.1NVD Advisory· Published Jul 30, 2025· Updated Jun 17, 2026
CVE-2025-43229
CVE-2025-43229
Description
This issue was addressed through improved state management. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. Processing maliciously crafted web content may lead to universal cross site scripting.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*range: <18.6
- (no CPE)range: 18.6
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*range: <15.6
- (no CPE)range: 15.6
Patches
Vulnerability mechanics
References
4- support.apple.com/en-us/124149nvdRelease NotesVendor Advisory
- support.apple.com/en-us/124152nvdRelease NotesVendor Advisory
- seclists.org/fulldisclosure/2025/Aug/0nvd
- seclists.org/fulldisclosure/2025/Jul/32nvd
News mentions
0No linked articles in our index yet.