This issue was addressed with improved URL validation. This issue is fixed in Safari 26, iOS 26 and iPadOS 26. Processing maliciously crafted web content may lead to unexpected URL redirection.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Mon, 15 Sep 2025 22:45:00 +0000

Type Values Removed Values Added
Description This issue was addressed with improved URL validation. This issue is fixed in Safari 26, iOS 26 and iPadOS 26. Processing maliciously crafted web content may lead to unexpected URL redirection.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2025-09-15T22:34:24.377Z

Reserved: 2025-03-27T16:13:58.336Z

Link: CVE-2025-31254

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2025-09-15T23:15:29.703

Modified: 2025-09-15T23:15:29.703

Link: CVE-2025-31254

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.