Apple WebKit Cross-Origin Data Exfiltration Vulnerability

A cross-origin data exfiltration vulnerability has been identified in the WebKit component of multiple Apple operating systems, including iOS 18.5, iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, watchOS 11.5, and visionOS 2.5. This vulnerability allows a malicious website to exfiltrate data from the user's browser.

Impact

Exploitation of this vulnerability could lead to unauthorized data exfiltration from the user's browser, potentially allowing attackers to access sensitive information without the user's consent.

Remediation

Users can update to the latest versions of iOS, iPadOS, macOS Sequoia, tvOS, watchOS, and visionOS to address this vulnerability.