Apple WebKit Same Origin Policy Bypass Vulnerability

A vulnerability in WebKit, the engine used by Safari, allows websites to bypass the Same Origin Policy, which is designed to prevent one site from accessing data from another site. This issue affects multiple Apple platforms, including macOS Sequoia, iOS 18.4, iPadOS 18.4, visionOS 2.4, and Safari 18.4. The vulnerability was addressed with improved state management.

Impact

Exploitation of this vulnerability could lead to unauthorized access to data or resources from another origin, potentially allowing for cross-site scripting attacks or other forms of data leakage.

Remediation

Users can update to the latest versions of Safari, iOS, iPadOS, visionOS, or macOS Sequoia to address this vulnerability.