Safari browser detects user data leak

The vulnerability discovered in the Apple Safari 15 browser could reveal information about the last websites visited by users and some data about the Google account.

The vulnerability is based on the IndexedDB browser API that is designed to store large amounts of data. Using this exploit, the site can see the user’s browser history and access personal data thanks to the user’s Google ID, which is used to make API requests to Google services.

FingerprintJS study results show that more than 30 sites are affected by this vulnerability. The study does not exclude that this number may be much higher than stated.

FingerprintJS indicated that they reported the exploit to Apple on November 28, but it has not yet been fixed.