CVE-2025-43228
Fixed in a distro release EPSS <1%CVSS 4.3
The issue was addressed with improved UI. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6. Visiting a malicious website may lead to address bar spoofing.
Products: apple safari, Apple iOS and iPadOS
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 11 | webkit2gtk | 2.48.5-1~deb11u1 |
| Debian 12 | webkit2gtk | 2.48.5-1~deb12u1 |
| Debian 12 | wpewebkit | no fix |
| Debian 13 | webkit2gtk | 2.48.5-1~deb13u1 |
| Debian 13 | wpewebkit | no fix |
| Debian 14 | webkit2gtk | 2.48.5-1 |
| Debian 14 | wpewebkit | 2.48.5-1 |
| SUSE Enterprise Storage 7.1 | webkit2gtk3 | 2.48.5-150200.150.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | webkit2gtk3 | 2.48.5-150200.150.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | webkit2gtk3 | 2.48.5-150400.4.122.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | webkit2gtk3-soup2 | 2.48.5-150400.4.122.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | webkit2gtk4 | 2.48.5-150400.4.122.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | webkit2gtk3 | 2.48.5-150400.4.122.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | webkit2gtk3-soup2 | 2.48.5-150400.4.122.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | webkit2gtk4 | 2.48.5-150400.4.122.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | webkit2gtk3 | 2.48.5-150400.4.122.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | webkit2gtk3-soup2 | 2.48.5-150400.4.122.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | webkit2gtk4 | 2.48.5-150400.4.122.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | webkit2gtk3 | 2.48.5-150400.4.122.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | webkit2gtk3-soup2 | 2.48.5-150400.4.122.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | webkit2gtk4 | 2.48.5-150400.4.122.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP6 | webkit2gtk3-soup2 | 2.48.5-150600.12.43.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP6 | webkit2gtk4 | 2.48.5-150600.12.43.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | webkit2gtk3-soup2 | 2.48.5-150600.12.43.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | webkit2gtk4 | 2.48.5-150600.12.43.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP6 | webkit2gtk3 | 2.48.5-150600.12.43.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP7 | webkit2gtk3 | 2.48.5-150600.12.43.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP6 | webkit2gtk4 | 2.48.5-150600.12.43.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | webkit2gtk4 | 2.48.5-150600.12.43.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | webkit2gtk3 | 2.48.5-4.41.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | webkit2gtk3 | 2.48.5-150200.150.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | webkit2gtk3 | 2.48.5-150400.4.122.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | webkit2gtk3-soup2 | 2.48.5-150400.4.122.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | webkit2gtk4 | 2.48.5-150400.4.122.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | webkit2gtk3 | 2.48.5-150400.4.122.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | webkit2gtk3-soup2 | 2.48.5-150400.4.122.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | webkit2gtk4 | 2.48.5-150400.4.122.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | webkit2gtk3 | 2.48.5-4.41.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | webkit2gtk3 | 2.48.5-150200.150.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | webkit2gtk3 | 2.48.5-150400.4.122.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | webkit2gtk3-soup2 | 2.48.5-150400.4.122.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | webkit2gtk4 | 2.48.5-150400.4.122.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | webkit2gtk3 | 2.48.5-150400.4.122.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | webkit2gtk3-soup2 | 2.48.5-150400.4.122.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | webkit2gtk4 | 2.48.5-150400.4.122.1 |
| SUSE Manager Proxy LTS 4.3 | webkit2gtk3-soup2 | 2.48.5-150400.4.122.1 |
| SUSE Manager Server LTS 4.3 | webkit2gtk3-soup2 | 2.48.5-150400.4.122.1 |
| Ubuntu 16.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 16.04 LTS | qtwebkit-source | no fix |
| Ubuntu 16.04 LTS | webkit2gtk | no fix |
| Ubuntu 16.04 LTS | webkitgtk | no fix |
| Ubuntu 18.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 18.04 LTS | qtwebkit-source | no fix |
| Ubuntu 18.04 LTS | webkit2gtk | no fix |
| Ubuntu 18.04 LTS | webkitgtk | no fix |
| Ubuntu 20.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 20.04 LTS | webkit2gtk | no fix |
| Ubuntu 20.04 LTS | wpewebkit | no fix |
| Ubuntu 22.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 22.04 LTS | webkit2gtk | 2.48.5-0ubuntu0.22.04.1 |
| Ubuntu 22.04 LTS | wpewebkit | no fix |
| Ubuntu 24.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 24.04 LTS | webkit2gtk | 2.48.5-0ubuntu0.24.04.1 |
| openSUSE Leap 15.6 | webkit2gtk3 | 2.48.5-150600.12.43.1 |
| openSUSE Leap 15.6 | webkit2gtk3-soup2 | 2.48.5-150600.12.43.1 |
| openSUSE Leap 15.6 | webkit2gtk4 | 2.48.5-150600.12.43.1 |