Description (CNA)
An issue existed in the specification for the resource timing API. The specification was updated and the updated specification was implemented. This issue is fixed in macOS Monterey 12.0.1. A malicious website may exfiltrate data cross-origin.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Apple / macOS | affected unspecified before 12.0 |
CWE
No CWE identifiers supplied.
References
- https://support.apple.com/kb/HT212814
- https://support.apple.com/kb/HT212815
- https://support.apple.com/en-us/HT212869
ADP enrichment
No English description supplied.