CVE-2025-43228

Overview

Advisory: Apple Security Advisory

Impact:

Description: Visiting a malicious website may lead to address bar spoofing

Researchers: Jaydev Ahire

Attribute Value
CVE CVE-2025-43228
Bugzilla 294374
Component WebKit
Bug Class LogicError
Severity medium
Commit 632a293bf7754147…
Advisory Apple Advisory

Root Cause Analysis

The issue was addressed with improved UI.

Files Changed

Source Files

  • Source/WebKit/UIProcess/PageClient.h
  • Source/WebKit/UIProcess/WebPageProxy.cpp
  • Source/WebKit/UIProcess/ios/PageClientImplIOS.h
  • Source/WebKit/UIProcess/ios/PageClientImplIOS.mm