Apple WebKit and Safari Address Bar Spoofing Vulnerability

A vulnerability in WebKit, the engine that powers Safari, has been identified, which can lead to address bar spoofing. This issue is present in Safari 18.2 and earlier versions, as well as in macOS Ventura, macOS Sonoma, and iOS 18.2 and earlier. The vulnerability arises when a user visits a malicious website, potentially misleading them about the authenticity or security of the site.

Impact

Exploitation of this vulnerability can cause address bar spoofing, where the displayed URL does not accurately represent the site being visited, potentially leading to phishing or other security risks.

Remediation

Users can update to macOS Sequoia 15.3, Safari 18.3, iOS 18.3, or iPadOS 18.3 to address this vulnerability.