Apple WebKit Leaked DNS Query Vulnerability in Multiple Products
Vulnerability
A logic issue in the WebKit component of Safari, iOS, iPadOS, tvOS, watchOS, and visionOS was addressed with improved state management. This vulnerability allows remote attackers to view leaked DNS queries when Private Relay is enabled. It affects several different versions and/or ranges.
Impact
Exploitation of this vulnerability could lead to unauthorized access to DNS query information, potentially revealing user browsing habits or interests.
Remediation
Users can update to the latest versions of Safari, iOS, iPadOS, tvOS, watchOS, or visionOS to address this vulnerability. Instructions for updating can be found on the Apple Support website.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.