Description

A spoofing issue was addressed with improved truncation when displaying the fully qualified domain name This issue is fixed in Safari 18.5, macOS Sequoia 15.5. A website may be able to spoof the domain name in the title of a pop-up window.

INFO

Published Date :

2025-11-21T21:22:24.270Z

Last Modified :

2025-11-23T11:32:09.916Z

Source :

apple
AFFECTED PRODUCTS

The following products are affected by CVE-2025-31266 vulnerability.

No data.

REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-31266.

CVSS Vulnerability Scoring System