Skip to content
fr Sign in
4.3 Medium

CVE-2025-31266 A spoofing issue was addressed with improved truncation when displaying the fully qualified domain name

Description

A spoofing issue was addressed with improved truncation when displaying the fully qualified domain name. This issue is fixed in Safari 18.5, macOS Sequoia 15.5. A website may be able to spoof the domain name in the title of a pop-up window.

Affected products and versions

Product Affected versions Fixed in
macOS 15.5 earliest → < 15.5 15.5
Safari 18.5 earliest → < 18.5 18.5

References

Timeline

  1. Published
  2. Last modified

Other CVEs of macOS

The 3813 CVEs of macOS →
CVE-2026-86925 An authorization issue was addressed with improved state management 5.5 Medium CVE-2026-84627 A buffer overflow was addressed with improved bounds checking 7.8 High CVE-2026-113945 An out-of-bounds read was addressed with improved bounds checking 5.5 Medium CVE-2026-65327 A logic issue was addressed with improved checks 8.4 High
Track this CVE