The macOS Monterey 12.2 and iOS 15.3 release candidates that came out today appear to address a Safari bug that could cause your recent browsing history and details about your identity to be leaked to malicious entities.

As shared last week by browser fingerprinting service FingerprintJS, there is an issue with the WebKit implementation of the IndexedDB JavaScript API. Any website that uses IndexedDB can access the names of IndexedDB databases generated by other websites during the same browsing session.

The bug permits a website to spy on other websites that the user visits while Safari is open, and because some websites use user-specific identifiers in their IndexedDB database names, personal information can be gleaned about the user and their browsing habits.

Browsers that use Apple’s WebKit engine are impacted, and that includes Safari 15 for Mac and Safari for iOS 15 and iPadOS 15. Some third-party browsers like Chrome are also affected on iOS and ‌iPadOS 15‌, but the macOS Monterey 12.2, iOS 15.3, and iPadOS 15.3 updates fix the vulnerability.

FingerprintJS constructed a demo website to let users check to see whether they’re impacted, and as 9to5Mac notes, after updating to the new software, the website detects no security holes.

The website is designed to tell users details about their Google accounts. On iOS 15.2.1 and ‌macOS Monterey‌ 12.1, we tested and the demo website was able to detect our Google account. After updating to the ‌macOS Monterey‌ 12.2 RC and the iOS 15.3 RC, the demo website no longer detects any data.

Apple earlier this week prepared a fix for the bug and uploaded it to the WebKit page on GitHub, so we knew that Apple was working to address the vulnerability. With the ‌macOS Monterey‌ 12.2 and iOS 15.3 release candidates now available, we could see these updates be made available to the public as soon as next week.

Related Stories

Apple Prepares Fix for Safari Bug Allowing Websites to Decipher Your Recent Browsing Activity

Over the weekend, we reported on a bug in WebKit’s implementation of a JavaScript API called IndexedDB that can reveal your recent browsing history and even your identity, according to browser fingerprinting service FingerprintJS. Apple has since prepared a fix for the bug, according to a WebKit commit on GitHub, but the fix will not be available to users until Apple releases macOS Monterey, …

Apple Releasing macOS Monterey on October 25

Monday October 18, 2021 10:55 am PDT by

Following months of developer and public beta testing, Apple today announced that macOS Monterey will officially launch on Monday, October 25. macOS Monterey maintains the same design as macOS Big Sur but includes several enhancements across the system. macOS Monterey consists of a completely redesigned Safari, Shortcuts for the Mac, Quick Note, and Universal Control, which will be coming in …

Apple Seeds Second macOS Monterey Release Candidate to Developers

Apple today seeded the second release candidate version of macOS Monterey, the newest version of the macOS operating system. The release candidate represents the final version of macOS Monterey that will be released to the public, and it comes just a few days after the first RC. The release candidate is listed as version 12.0.1, presumably because Apple has made a few tweaks since 12.0…

macOS Monterey Release Candidate Undoes Safari Changes, Reintroduces Old Tab Design

Apple has admitted defeat on the Safari design changes that have been present for the entire macOS Monterey beta, and the release candidate that was provided to developers today reverts to the old style that was available prior to Safari 15. Safari design in the macOS Monterey release candidate macOS Monterey now features a standard Big Sur tab design that does have the tabs with spaces in…

iOS 15.1, watchOS 8.1, and macOS Monterey Available Next Week

Apple today announced that iOS 15.1, iPadOS 15.1, watchOS 8.1, tvOS 15.1, and macOS Monterey will all be released as free software updates next week. Apple revealed this timing in a press release for the third-generation AirPods. Apple has since updated its website to confirm that macOS Monterey will be released on Monday, October 25, following over four months of beta testing. macOS…

macOS Monterey Includes New ‘Monterey’ Screen Saver

Apple yesterday provided the release candidate version of macOS Monterey to developers, and the RC represents the final version of Monterey that will be going out to the public on Monday. In the update, Apple introduced a new “Monterey” screen saver, which is designed to accompany the Monterey wallpaper that was already available. The Monterey screen saver offers slow transitions through…

Apple Seeds macOS Monterey 12.2 Release Candidate to Developers [Update: Public Beta Available]

Apple today seeded the release candidate version of an upcoming macOS Monterey 12.2 update to developers for testing purposes, with the new software coming one week the second beta and more than a month after the release of macOS Monterey 12.1. Registered developers can download the beta through the Apple Developer Center and after the appropriate profile is installed, betas will be…

Popular Stories

AirPods Save Woman’s Life With Feature Everyone Should Know

Apple’s AirPods have been credited with saving a woman’s life after a potentially fatal fall, People reports. When a 60-year-old florist in New Jersey tripped and hit her head in her studio, she lost consciousness and awoke heavily bleeding. With nobody around to call for help, she realized she had her AirPods in, and used a “Hey Siri” command to call 911. An operator was able to stay on the …

Review: M1 Max MacBook Pro After Three Months

It’s now been a few months since the M1 Pro and M1 Max MacBook Pro models launched in October, and MacRumors video editor Dan Barbera has been using one of the new machines since they debuted. Over on the MacRumors YouTube channel, Dan has shared a three month review of his MacBook Pro to see how it has held up over time and how it’s changed his workflow. Subscribe to the MacRumors YouTube …

New iPhone SE Likely to Launch in April Based on Production Timeframe

Apple suppliers will begin producing display panels for the third-generation iPhone SE this month, with final assembly of the device likely to start in March, according to information shared by display industry consultant Ross Young. Based on this production timeframe, Young believes the third-generation iPhone SE is likely to launch in the second half of April, or perhaps in early May at…

Apple to Stop Including EarPods With Every iPhone Sold in France From Next Week

Apple will no longer include EarPods with every iPhone sold in France, starting on January 24, according to a notice posted by a French carrier (via iGeneration). Apple was previously required to include EarPods in the box with the iPhone due to a French law that required every smartphone sold in the country to come with a “handsfree kit,” but the law has now been changed in favor of reducing the …

New iPad Air, Macs, and iPhone SE With 5G Likely to Be Announced at Apple Event This Spring

Earlier this week, Bloomberg’s Mark Gurman tweeted that Apple “will be holding a spring event” to announce a new iPhone SE and other hardware. In a recent edition of his newsletter, Gurman said the event is likely to occur in March or April. Gurman did not elaborate on what “other hardware” will be announced at Apple’s purported spring event, but rumors suggest at least four products are…

Apple Floated as Potential Buyer of Peloton

Following months of bleak news about Peloton’s “precarious state,” including the revelation that it has halted production of its bikes and treadmills, Apple is being floated as a potential buyer of Peloton’s troubled fitness business. Yesterday, CNBC reported that Peloton will temporarily stop production of its connected fitness products due to a “significant reduction” in consumer demand, a …

Apple Watch Charging Bug Fixed in watchOS 8.4 Release Candidate

The watchOS 8.4 release candidate that was seeded to developers and beta testers this morning addresses an ongoing bug that could cause some Apple Watch chargers not to work properly with the Apple Watch. Back in December, we reported on a growing number of charging issues that Apple Watch Series 7 owners were facing. Since watchOS 8.3, there have been a number of complaints about…

macOS Monterey 12.2 and iOS 15.3 Release Candidates Fix Safari Bug That Leaks Browsing Activity

The macOS Monterey 12.2 and iOS 15.3 release candidates that came out today appear to address a Safari bug that could cause your recent browsing history and details about your identity to be leaked to malicious entities. As shared last week by browser fingerprinting service FingerprintJS, there is an issue with the WebKit implementation of the IndexedDB JavaScript API. Any website that uses…