CVE-2025-31266

Overview

Advisory: Apple Security Advisory

Impact:

Description: A website may be able to spoof the domain name in the title of a pop-up window

Researchers: @RenwaX23

Attribute Value
CVE CVE-2025-31266
Bugzilla None
Component WebKit
Bug Class LogicError
Severity medium
Advisory Apple Advisory

Root Cause Analysis

A spoofing issue was addressed with improved truncation when displaying the fully qualified domain name