Apple WebKit and Safari Same Origin Policy Bypass Vulnerability

A vulnerability exists in Apple WebKit and Safari that allows a website to bypass the Same Origin Policy, potentially leading to unauthorized access or manipulation of data. This issue affects multiple platforms, including iOS, iPadOS, macOS Sequoia, and visionOS. The vulnerability arises from inadequate isolation of script imports, which can be exploited by visiting a malicious website.

Impact

Exploitation of this vulnerability can lead to a bypass of the Same Origin Policy, allowing for unauthorized access to data or resources that should be protected by this security measure.

Remediation

Users can update to Safari 18.4, iOS 18.4, iPadOS 18.4, macOS Sequoia 15.4, or visionOS 2.4 to address this vulnerability.