---
id: CVE-2025-43493
title: The issue was addressed with improved checks
summary: >-
  The issue was addressed with improved checks. This issue is fixed in Safari
  26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe
  26.1, visionOS 26.1. Visiting a malicious website may lead to address bar
  spoofing.
severity: medium
cvss: 4.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N'
cwe:
  - CWE-290
vendor: apple
product: safari
affected:
  - safari < 26.1
  - ipados < 26.1
  - iphone_os < 26.1
  - visionos < 26.1
patched:
  - safari 26.1
  - ipados 26.1
  - iphone_os 26.1
  - visionos 26.1
published: '2025-11-04'
updated: '2026-09-26'
sourceUpdated: '2026-09-26T00:10:00.127'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-43493'
references:
  - url: 'https://support.apple.com/en-us/125632'
    label: product-security@apple.com
  - url: 'https://support.apple.com/en-us/125633'
    label: product-security@apple.com
  - url: 'https://support.apple.com/en-us/125634'
    label: product-security@apple.com
  - url: 'https://support.apple.com/en-us/125638'
    label: product-security@apple.com
  - url: 'https://support.apple.com/en-us/125640'
    label: product-security@apple.com
tags:
  - nvd
epss: 0.00362
epssPercentile: 0.27309
ingestedAt: '2026-09-26T00:22:39.974Z'
---

## Overview

The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1. Visiting a malicious website may lead to address bar spoofing.

## Affected

- `safari < 26.1`
- `ipados < 26.1`
- `iphone_os < 26.1`
- `visionos < 26.1`

## Remediation

Upgrade past the affected range:

- `safari 26.1`
- `ipados 26.1`
- `iphone_os 26.1`
- `visionos 26.1`