PT-2025-31310 · Apple+5 · Ipados+7

Gilad Moav · Published 2025-07-29 · Updated 2025-11-25 · CVE-2025-43228

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.6 iPadOS versions prior to 18.6

Description Visiting a malicious website may lead to address bar spoofing. The issue was addressed with improved UI.

Recommendations Update to iOS version 18.6 or later. Update to iPadOS version 18.6 or later.

Fix

UI Misrepresentation of Critical Information

Weakness Enumeration

CWE-451

Related Identifiers

BDU:2025-09429

CVE-2025-43228

DLA-4276-1

DSA-5978-1

MGASA-2025-0313

SUSE-SU-2025:02765-1

SUSE-SU-2025:02766-1

SUSE-SU-2025:02777-1

SUSE-SU-2025:02973-1

SUSE-SU-2025_02765-1

SUSE-SU-2025_02766-1

SUSE-SU-2025_02777-1

SUSE-SU-2025_02973-1

USN-7702-1

Affected Products

Astra Linux

Debian

Linuxmint

Apple Macos

Suse

Ubuntu

Ios

Ipados

References · 86

• https://advisories.mageia.org/MGASA-2025-0313.html · Security Note
• https://support.apple.com/en-us/124147 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-6558 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02973-1 · Vendor Advisory
• https://support.apple.com/en-us/124152 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-31273 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2025-0313 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-43216 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7702-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-43211 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-43228 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-43212 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-43228 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-43228 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-43228 · Vendor Advisory