This vulnerability in Apple Safari involves a weakness that allows a malicious webpage to fingerprint users by exploiting improper state management. Apple fixed the issue in Safari 17.5 and related OS updates by improving state management to prevent such fingerprinting. The CVSS 3.1 score is 6.5 (medium severity) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N, indicating network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact.

A malicious webpage could fingerprint users visiting it, potentially enabling tracking or profiling without user consent. The vulnerability affects user privacy by compromising integrity (tracking accuracy) but does not expose confidential data or disrupt service availability. There are no known active exploits in the wild.

Apple has released official fixes for this vulnerability in Safari 17.5 and corresponding updates for iOS 17.5, iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, and watchOS 10.5. Users and administrators should apply these updates promptly to mitigate the risk. Since the vulnerability is fixed in these versions, no additional mitigation steps are required beyond updating to the patched versions.