macOS Monterey 12.2 and iOS 15.3 Release Candidates Fix Safari Bug That Leaks Browsing Activity
The macOS Monterey 12.2 and iOS 15.3 release candidates that came out today appear to address a Safari bug that could cause your recent browsing history and details about your identity to be leaked to malicious entities.
As shared last week by browser fingerprinting service FingerprintJS, there is an issue with the WebKit implementation of the IndexedDB JavaScript API. Any website that uses IndexedDB can access the names of IndexedDB databases generated by other websites during the same browsing session.
The bug permits a website to spy on other websites that the user visits while Safari is open, and because some websites use user-specific identifiers in their IndexedDB database names, personal information can be gleaned about the user and their browsing habits.
Browsers that use Apple's WebKit engine are impacted, and that includes Safari 15 for Mac and Safari for iOS 15 and iPadOS 15. Some third-party browsers like Chrome are also affected on iOS and iPadOS 15, but the macOS Monterey 12.2, iOS 15.3, and iPadOS 15.3 updates fix the vulnerability.
FingerprintJS constructed a demo website to let users check to see whether they're impacted, and as 9to5Mac notes, after updating to the new software, the website detects no security holes.
The website is designed to tell users details about their Google accounts. On iOS 15.2.1 and macOS Monterey 12.1, we tested and the demo website was able to detect our Google account. After updating to the macOS Monterey 12.2 RC and the iOS 15.3 RC, the demo website no longer detects any data.
Apple earlier this week prepared a fix for the bug and uploaded it to the WebKit page on GitHub, so we knew that Apple was working to address the vulnerability. With the macOS Monterey 12.2 and iOS 15.3 release candidates now available, we could see these updates be made available to the public as soon as next week.
Popular Stories
Leaker Sonny Dickson is back today with a new dummy unit image showing all four iPhone 16 Pro color variants, including the rose gold or "bronze" unit that replaces Blue Titanium in the existing iPhone 15 Pro models. The iPhone 16 Pro models are expected to come in black, white or silver, gray or "Natural Titanium," and a rose or rose gold color replacing Blue Titanium, according to Apple...
Multiple rumors have suggested that the iPhone 16 models are going to have an all-new button that's designed to make it easier to capture photos when the devices are held in landscape mode. Apple calls the button the Capture Button internally, and it is going to be one of the most advanced buttons that's been introduced to date with support for multiple gestures and the ability to respond to ...
Apple typically releases its new iPhone series in the fall, and a possible September 10 announcement date has been floated this year, which means we are just one month away from the launch of the iPhone 16. Like the iPhone 15 series, this year's lineup is expected to stick with four models – iPhone 16, iPhone 16 Plus, iPhone 16 Pro, and iPhone 16 Pro Max – although there are plenty of design...
Apple's iPhone 16 series is expected to debut in September 2024. This release follows Apple's trend of introducing new iPhone models annually in the fall. While the exact date has yet to be officially confirmed, the day of Tuesday, September 10 has been rumored as a possible announcement date, and September has traditionally been the month when Apple unveils its latest smartphone innovations. ...
Apple is moving forward with its project to develop a tabletop robotic device, according to Bloomberg's Mark Gurman. Subscribe to the MacRumors YouTube channel for more videos. The device would feature a large iPad-like display mounted on a "thin robotic arm" that would allow the display to tilt and up and down and rotate a full 360º, and it would serve as a "smart home command center," a...
It's almost September, but Apple still has multiple new product launches planned for 2024. New iPhone 16 models and Apple Watches are coming in September, and we're also going to get at least three Mac updates with M4 chips this year, according to rumors. Here's what's on the horizon. MacBook Pro Apple plans to refresh both the 14-inch and 16-inch MacBook Pro models, adding M4 chips. The ...
T-Mobile was fined $60 million by the Committee on Foreign Investment in the US (CFIUS) for negligence surrounding data breaches, reports Reuters. CFIUS penalized T-Mobile for failing to prevent or disclose unauthorized access to sensitive customer data. When T-Mobile merged with Sprint, it signed a national security agreement with CFIUS, which is what led to the fine earlier this year....
