Earlier this week, FingerprintJS uncovered a serious bug in Apple's Safari web browser that allows anyone to extract a user's browsing history, even Google user IDs. As expected, Apple is now working on a fix for this bug, which is expected to be released to users very soon.
See also: Safari: Bug exposes your recent browsing history and Google account details
Based on a WebKit commit on GitHub, Apple engineers are already working on a fix for the Safari bug that leaks user data. For those unfamiliar, WebKit is Apple's browser engine that powers Safari and other web browsers. Since WebKit is an open source engine, updates related to the bug are public and can now be viewed on GitHub.
See also: Safari iPhone: How to prevent sites from requesting access to your location
Specifically, the flaw was found in the implementation of IndexedDB, which is a Javascript API used to store data. Malicious websites can use the exploit to see URLs a user has recently visited and even obtain their Google User ID, which can be used to find your personal information.
Apple hasn't provided details on when the fix will be available to users, but as noted by MacRumors, the fix requires Apple to release updated versions of iOS 15 and macOS Monterey to include a new version of Safari using the latest WebKit engine.
See also: How to restore the old Safari on iPhone
Apple is currently testing iOS 15.3 beta and macOS Monterey 12.2 beta, so it's possible that the next beta updates will bring the fix for the Safari bug. It's worth noting that the version of WebKit used in Safari 14, which is the one for iOS 14, is not affected by the bug.
Information source: 9to5mac.com
