CVE-2024-40866 is a spoofing vulnerability affecting Safari 18 and macOS Sequoia 15. Visiting a malicious website could lead to address bar spoofing, potentially tricking users into believing they are on a legitimate site. The issue has been addressed with improved UI in the updated software.

Although the CVSS score is 6.5, indicating a medium severity, the SOCRadar Vulnerability Risk Score (SVRS) is 61. While this does not reach the critical threshold of 80, the 'In The Wild' tag emphasizes that this vulnerability is actively being exploited. Address bar spoofing can be used for phishing attacks, leading to potential data theft or malware installation. Users should update to the latest versions of Safari and macOS Sequoia to mitigate this risk.