Apple WebKit Safari Tracking Vulnerability

A vulnerability in the WebKit component of Safari allows websites to track users through Safari web extensions. This issue is present in Safari 26.3 on macOS Tahoe, as well as in iOS 26.3, iPadOS 26.3, and visionOS 26.3. The vulnerability arises from a logic issue that was addressed with improved state management.

Impact

Exploitation of this vulnerability could lead to unauthorized tracking of users via Safari web extensions.

Remediation

Users can update to Safari 26.3 on macOS Tahoe, or to iOS 26.3, iPadOS 26.3, or visionOS 26.3 to address this vulnerability.