Description
The issue was addressed by removing origin information. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4. A website may be able to track sensitive user information.
Metrics
CVSS 3.1 6.5/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Apple | macOS | >= unspecified, < 13.3 |
| Apple | Safari | >= unspecified, < 16.4 |
| Apple | iOS and iPadOS | >= unspecified, < 16.4 |
| Apple | watchOS | >= unspecified, < 9.4 |
| Apple | tvOS | >= unspecified, < 16.4 |
| Apple | iOS and iPadOS | >= unspecified, < 15.7 |
References
- https://support.apple.com/en-us/HT213670Vendor Advisory
- https://support.apple.com/en-us/HT213671Vendor Advisory
- https://support.apple.com/en-us/HT213673Vendor Advisory
- https://support.apple.com/en-us/HT213674Vendor Advisory
- https://support.apple.com/en-us/HT213676Vendor Advisory
- https://support.apple.com/en-us/HT213678Vendor Advisory
- https://support.apple.com/en-us/HT213670Vendor Advisory
- https://support.apple.com/en-us/HT213671Vendor Advisory
- https://support.apple.com/en-us/HT213673Vendor Advisory
- https://support.apple.com/en-us/HT213674Vendor Advisory
- https://support.apple.com/en-us/HT213676Vendor Advisory
- https://support.apple.com/en-us/HT213678Vendor Advisory
Timeline
- Published
- May 8, 2023
- Last modified
- Jun 17, 2026
- NVD status
- Modified