Home

Description

The issue was addressed with improved routing of Safari-originated requests. This issue is fixed in macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2, Safari 18.2, iPadOS 17.7.3. On a device with Private Relay enabled, adding a website to the Safari Reading List may reveal the originating IP address to the website.

PUBLISHED Reserved 2024-08-20 | Published 2024-12-11 | Updated 2025-11-03 | Assigner apple

Problem types

On a device with Private Relay enabled, adding a website to the Safari Reading List may reveal the originating IP address to the website

Product status

Any version before 15.2
affected

Any version before 17.7
affected

Any version before 18.2
affected

Any version before 18.2
affected

References

seclists.org/fulldisclosure/2024/Dec/13

seclists.org/fulldisclosure/2024/Dec/7

seclists.org/fulldisclosure/2024/Dec/6

support.apple.com/en-us/121839

support.apple.com/en-us/121838

support.apple.com/en-us/121837

support.apple.com/en-us/121846

cve.org (CVE-2024-44246)

nvd.nist.gov (CVE-2024-44246)

Download JSON