Apple Prepares Fix for Safari Bug Allowing Websites to Decipher Your Recent Browsing Activity

Over the weekend, we reported on a bug in WebKit's implementation of a JavaScript API called IndexedDB that can reveal your recent browsing history and even your identity, according to browser fingerprinting service FingerprintJS.

safari icon blue banner
Apple has since prepared a fix for the bug, according to a WebKit commit on GitHub, but the fix will not be available to users until Apple releases macOS Monterey, iOS 15, and iPadOS 15 updates with an updated version of Safari. Apple declined to comment when asked to provide a timeframe for a fix being released to the public.

The bug allows any website that uses IndexedDB for client-side data storage to access the names of IndexedDB databases generated by other websites during a user's browsing session. The bug could allow one website to track other websites the user visits in different tabs or windows, as the database names are often specific to each website, and sometimes the database names contain user-specific identifiers that could reveal a user's identity.

FingerprintJS has a live demo of the bug, which affects newer versions of browsers using Apple's open source browser engine WebKit, including Safari 15 for macOS and Safari on all versions of iOS 15 and iPadOS 15. The bug also affects third-party browsers like Chrome and Edge on iOS 15 and iPadOS 15, as Apple requires all iPhone and iPad browsers to use WebKit.

The bug does not affect Safari 14 for macOS or any browser on iOS 14 and iPadOS 14, according to FingerprintJS, which has a blog post with more details.

Tag: Safari

Popular Stories

iOS 18 CarPlay Feature

iOS 18 Adds These 5 New Features to CarPlay

Thursday June 13, 2024 7:44 am PDT by
Apple did not mention CarPlay during its WWDC keynote this week, but iOS 18 includes a handful of new features for the in-car software. Overall, there is not a whole lot new for CarPlay on iOS 18, with changes seemingly limited to the Messages and Settings apps so far. Below, we recap everything new for CarPlay on iOS 18. New for CarPlay on iOS 18 1. Contact Photos in Messages App...
ios 18 button bulge

iOS 18 Adds Pop-Out Bezel Animation When Pressing iPhone Buttons

Tuesday June 11, 2024 10:40 am PDT by
iOS 18 includes a small but interesting change for the buttons on the iPhone, adding more of a visual element when changing volume, activating the Action button, or locking the screen. When you press an iPhone button in iOS 18, the display bezel bulges outward slightly. This feature is available for the volume buttons, Action button and the power button, and it will also likely be used for...
maxresdefault

First Look at Messages via Satellite in iOS 18

Thursday June 13, 2024 11:29 am PDT by
Apple has been gradually expanding its suite of satellite connectivity features for iPhone, and iOS 18 brings a significant new one in the form of Messages via satellite. The feature allows users to send and receive iMessages and SMS texts, including emoji and Tapbacks, while out of range of cellular and Wi-Fi networks. CNET met up with Apple's senior director of platform product marketing,...
iOS 18 Wallet Feature

Here's What's New in Apple Wallet on iOS 18 for Event Tickets and More

Friday June 14, 2024 7:32 am PDT by
iOS 18 includes a handful of enhancements to the Wallet app on the iPhone, with new features for Apple Pay, Apple Cash, event tickets, and more. Below, we outline everything new for the Wallet app on iOS 18, based on information from Apple's press release and a WWDC 2024 coding session. Redesigned Event Tickets Event tickets have an all-new design in the Wallet app on iOS 18, complete...

Top Rated Comments

ouimetnick Avatar
32 months ago

but the fix will not be available to users until Apple releases macOS Monterey, iOS 15, and iPadOS 15 updates with an updated version of Safari.
Why can't we have Safari separated from the OS? I didn't have to update macOS for iTunes updates. Never had to update iOS for updates to Pages, Numbers, Keynote, etc.

They do update Safari separate from macOS on older versions of macOS.. Why can't the same be done with the latest/current release of macOS (and iOS/iPadOS)?
Score: 17 Votes (Like | Disagree)
TheYayAreaLiving ?️ Avatar
32 months ago

What do you mean Apple is preparing for a fix?

Apple just issued a fix for macOS and users can get it right here ('https://www.mozilla.org/en-US/firefox/new/') :p
I’m a big fan of Mozilla, Firefox browser. Been using it for years. Possibly a decade. It's too bad I'm addicted to Safari. But Firefox is my 2nd go-to.

Good suggestion though. ?☝️
Score: 14 Votes (Like | Disagree)
KaliYoni Avatar
32 months ago

The bug does not affect Safari 14 for macOS or any browser on iOS 14 and iPadOS 14
Yet again, upgrading right when a new macOS or iOS is released causes major problems for users! If I could get Tim Cook to do one thing, it would be to stop the forced annual releases of OS's. It's not like Apple would take a sales revenue hit from stretching out releases to 18 or 24 months...
Score: 13 Votes (Like | Disagree)
sw1tcher Avatar
32 months ago
What do you mean Apple is preparing for a fix?

Apple just issued a fix for macOS and users can get it right here ('https://www.mozilla.org/en-US/firefox/new/') :p
Score: 13 Votes (Like | Disagree)
diamondsw Avatar
32 months ago

Why can't we have Safari separated from the OS? I didn't have to update macOS for iTunes updates. Never had to update iOS for updates to Pages, Numbers, Keynote, etc.

They do update Safari separate from macOS on older versions of macOS.. Why can't the same be done with the latest/current release of macOS (and iOS/iPadOS)?
Because Safari is the new IE. I only somewhat kid... Remember when we all blasted Microsoft for this exact behavior in Win98? :(
Score: 13 Votes (Like | Disagree)
ian87w Avatar
32 months ago

Using Firefox while Safari is being repaired is a great idea ?
Not when you are on iOS. Every browsers on iOS use the same Safari/Webkit engine, and are affected by this bug.
Score: 12 Votes (Like | Disagree)