{"id":"CVE-2025-24113","published":"2025-01-27T21:45:26Z","modified":"2026-04-02T18:08:25Z","title":"The issue was addressed with improved UI","vendor":"Apple","product":"Safari","tier":"core","eol":null,"affectedVersions":[{"vendor":"Apple","product":"Safari","versions":["< 18.3","< 18.4"]},{"vendor":"Apple","product":"iOS and iPadOS","versions":["< 18.3","< 18.4"]},{"vendor":"Apple","product":"iPadOS","versions":["< 17.7.6"]},{"vendor":"Apple","product":"macOS","versions":["< 15.3","< 15.4"]},{"vendor":"Apple","product":"visionOS","versions":["< 2.3","< 2.4"]},{"vendor":"Apple","product":"watchOS","versions":["< 11.4"]}],"description":{"text":"The issue was addressed with improved UI. This issue is fixed in Safari 18.3, Safari 18.4, iOS 18.3 and iPadOS 18.3, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sequoia 15.4, visionOS 2.3, visionOS 2.4, watchOS 11.4. Visiting a malicious website may lead to user interface spoofing.","provenance":"source","from":"CVE.org"},"summary":null,"cvss":{"score":4.3,"severity":"MEDIUM","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","provenance":"source","from":"CISA ADP Vulnrichment"},"epss":{"score":0.00803,"percentile":0.56607,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2026-04-07","exploitedFirstSeen":"2026-04-07","ransomware":false,"evidence":[{"url":"https://media.jamf.com/documents/white-papers/security-360-mac-2026.pdf","date":"2026-04-07"}],"evidenceTotal":1,"provenance":"source"},"exploited":true,"otx":{"pulseCount":3,"pulses":[{"name":"Spam “Broken Seal” DocuSign-themed Delivery w/Fileless Process Hollowing (Zeppelin/Bloat-A) by msudosos","url":"https://otx.alienvault.com/pulse/69bf64eccb5d39a90a3c391e","created":"2026-03-22"},{"name":"Spam “Broken Seal” DocuSign-themed Delivery w/Fileless Process Hollowing (Zeppelin/Bloat-A) by msudosos","url":"https://otx.alienvault.com/pulse/69bf64e1d5e06aa6207f78de","created":"2026-03-22"},{"name":"“Broken Seal” DocuSign-themed Delivery with Fileless Process Hollowing (Zeppelin/Bloat-A)","url":"https://otx.alienvault.com/pulse/698e93e1ab02db8c49e8c3ed","created":"2026-02-13"}],"provenance":"machine"},"cwes":[],"references":[{"url":"https://support.apple.com/en-us/122066","tags":[]},{"url":"https://support.apple.com/en-us/122068","tags":[]},{"url":"https://support.apple.com/en-us/122073","tags":[]},{"url":"https://support.apple.com/en-us/122074","tags":[]},{"url":"https://support.apple.com/en-us/122371","tags":[]},{"url":"https://support.apple.com/en-us/122372","tags":[]},{"url":"https://support.apple.com/en-us/122373","tags":[]},{"url":"https://support.apple.com/en-us/122376","tags":[]},{"url":"https://support.apple.com/en-us/122378","tags":[]},{"url":"https://support.apple.com/en-us/122379","tags":[]},{"url":"http://seclists.org/fulldisclosure/2025/Apr/13","tags":[]},{"url":"http://seclists.org/fulldisclosure/2025/Apr/8","tags":[]},{"url":"http://seclists.org/fulldisclosure/2025/Apr/5","tags":[]},{"url":"http://seclists.org/fulldisclosure/2025/Apr/4","tags":[]},{"url":"http://seclists.org/fulldisclosure/2025/Apr/12","tags":[]},{"url":"http://seclists.org/fulldisclosure/2025/Apr/2","tags":[]},{"url":"http://seclists.org/fulldisclosure/2025/Jan/20","tags":[]},{"url":"http://seclists.org/fulldisclosure/2025/Jan/15","tags":[]},{"url":"http://seclists.org/fulldisclosure/2025/Jan/13","tags":[]},{"url":"http://seclists.org/fulldisclosure/2025/Jan/12","tags":[]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2025-3625","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-3625","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2025-01-27","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2025-24113","provenance":"source"},{"date":"2026-04-07","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://media.jamf.com/documents/white-papers/security-360-mac-2026.pdf","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":55.7,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":5.0,"detail":"added 206 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":11.32,"detail":"percentile 0.5661"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":1.37,"detail":"3 pulses"},{"name":"CVSS severity","points":3.01,"detail":"base score 4.3"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}