CVE-2025-30425

This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, watchOS 11.4. A malicious website may be able to track users in Safari private browsing mode.

• CWE-284

• https://support.apple.com/en-us/122371Vendor Advisory
• https://support.apple.com/en-us/122372Vendor Advisory
• https://support.apple.com/en-us/122373Vendor Advisory
• https://support.apple.com/en-us/122376
• https://support.apple.com/en-us/122377Vendor Advisory
• https://support.apple.com/en-us/122379Vendor Advisory
• http://seclists.org/fulldisclosure/2025/Apr/11
• http://seclists.org/fulldisclosure/2025/Apr/13
• http://seclists.org/fulldisclosure/2025/Apr/2
• http://seclists.org/fulldisclosure/2025/Apr/4
• http://seclists.org/fulldisclosure/2025/Apr/5
• http://seclists.org/fulldisclosure/2025/Apr/8

Published

Mar 31, 2025

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-30419There is a memory corruption vulnerability due to an out of …7.8
• CVE-2025-3042A vulnerability classified as critical was found in Project …9.8
• CVE-2025-30420There is a memory corruption vulnerability due to an out of …7.8
• CVE-2025-30421There is a memory corruption vulnerability due to a stack-ba…7.8
• CVE-2025-30422A buffer overflow was addressed with improved input validati…6.5
• CVE-2025-30424A logging issue was addressed with improved data redaction. …9.8
• CVE-2025-30426This issue was addressed with additional entitlement checks.…9.8
• CVE-2025-30427A use-after-free issue was addressed with improved memory ma…4.3
• CVE-2025-30428This issue was addressed through improved state management. …5.4
• CVE-2025-30429A path handling issue was addressed with improved validation…6.3
• CVE-2025-3043A vulnerability, which was classified as critical, has been …6.9
• CVE-2025-30430This issue was addressed through improved state management. …9.8