CVE-2025-30466

No fix known EPSS <1%CVSS 9.8

This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4. A website may be able to bypass Same Origin Policy.

Published 2025-05-29 · CVE record · OSV

Products: apple safari, Apple iOS and iPadOS, Apple macOS, Apple visionOS