Apple WebKit and Safari Same Origin Policy Bypass Vulnerability

A vulnerability exists in WebKit, the engine that powers Safari, allowing websites to access sensor information without user consent. This issue affects Safari 18.4, as well as iOS 18.4, iPadOS 18.4, and macOS Sequoia 15.4. The vulnerability arises from inadequate checks, which may enable a website to bypass user privacy protections.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensor data, potentially allowing for privacy violations by tracking user activity or behavior without consent.