Apple WebKit Universal Cross-Site Scripting Vulnerability

A vulnerability in the WebKit component of various Apple operating systems, including macOS Sequoia 15, watchOS 11, iOS 18, iPadOS 18, and tvOS 18, allows for universal cross-site scripting. This issue arises from improper handling of custom URL schemes, which can be exploited by maliciously crafted web content, potentially leading to cross-origin data exfiltration or user interface spoofing.

Impact

Exploitation of this vulnerability could result in universal cross-site scripting, allowing an attacker to execute scripts in the context of the user's browser.

Remediation

Users can update to the latest versions of macOS, watchOS, iOS, iPadOS, and tvOS to address this vulnerability.