CVE-2025-24208
Overview
Advisory: Apple Security Advisory
Impact:
Description: Loading a malicious iframe may lead to a cross-site scripting attack
Researchers: Muhammad Zaid Ghifari (Mr.ZheeV) and Kalimantan Utara
| Attribute | Value |
|---|---|
| CVE | CVE-2025-24208 |
| Bugzilla | 286381 |
| Component | WebKit |
| Bug Class | LogicError |
| Severity | medium |
| Commit | 609e8c7a932f28b7… |
| Advisory | Apple Advisory |
Root Cause Analysis
A permissions issue was addressed with additional restrictions.
Files Changed
Source Files
Source/WebKit/UIProcess/WebPageProxy.cppSource/WebKit/UIProcess/WebPageProxy.h
Test Files
Tools/TestWebKitAPI/Tests/WebKitCocoa/OpenAndCloseWindow.mm