{"id":"CVE-2025-43229","published":"2025-07-29T23:29:11Z","modified":"2026-04-02T18:13:07Z","title":"This issue was addressed through improved state management","vendor":"Apple","product":"Safari","tier":"tail","description":{"text":"This issue was addressed through improved state management. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. Processing maliciously crafted web content may lead to universal cross site scripting.","provenance":"source","from":"CVE.org"},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","provenance":"source","from":"CISA ADP Vulnrichment"},"epss":{"score":0.00347,"percentile":0.28348,"provenance":"source"},"cwes":[{"id":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation"}],"references":[{"url":"https://support.apple.com/en-us/124149","tags":[]},{"url":"https://support.apple.com/en-us/124152","tags":[]},{"url":"http://seclists.org/fulldisclosure/2025/Aug/0","tags":[]},{"url":"http://seclists.org/fulldisclosure/2025/Jul/32","tags":[]}],"priority":{"score":9.9,"factors":[{"name":"EPSS percentile","points":5.67},{"name":"CVSS severity","points":4.27}]},"vendorSlug":"apple","affectedVersions":[{"vendor":"Apple","product":"Safari","versions":["< 18.6"]},{"vendor":"Apple","product":"macOS","versions":["< 15.6"]}],"euvd":{"id":"EUVD-2025-23054","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-class-apple-ios-macos-cwe-79"}}