CVE-2025-24150: 
Apple Safari vulnerability analysis and mitigation

A privacy vulnerability (CVE-2025-24150) was discovered in WebKit Web Inspector, affecting multiple Apple operating systems including macOS Sequoia 15.3, Safari 18.3, iOS 18.3, and iPadOS 18.3. The vulnerability was discovered by Johan Carlsson (joaxcar) and was publicly disclosed on January 27, 2025 (Apple Support, CVE).

The vulnerability is related to a privacy issue in the Web Inspector component of WebKit, where copying a URL from Web Inspector could lead to command injection. The issue was addressed by implementing improved handling of files. The vulnerability has been assigned a CVSS v3 score of 8.8 (High), indicating significant potential impact (Red Hat).

If exploited, this vulnerability could allow an attacker to perform command injection through the Web Inspector interface when copying URLs. This could potentially lead to unauthorized command execution on the affected system (Apple Support).

Apple has released security updates to address this vulnerability in macOS Sequoia 15.3, Safari 18.3, iOS 18.3, and iPadOS 18.3. Users are advised to update their systems to the latest versions to receive the security fixes (Apple Support, Apple Support).