Sign up for our daily newsletter

  • Privacy Policy
  • Advertise with Us

Safari Not Working on Your iPhone? Here’s How to Fix It

Ojash Yadav

Although iPhones and iPads support other apps to reach the Web, Safari remains the most favored and frequently used browser for iOS users. Troubleshooting on Safari can be frustrating, especially if its issues prevent you from searching for a solution online. Here are a few common reasons why Safari may not be working on your iPhone and how to fix the problems.

Turn on Mobile Data for the Safari App

Disable experimental features, change your network settings.

Also read: How to Make Mobile Safari Save Your Passwords on iOS

Test Your Internet Connection

To begin with, ensure that the problem is with Safari and not with your internet connection. For this, open, say, a non-Apple app like Facebook or Chrome, and see whether the website or the feed loads. If it does, then Safari is at fault. Otherwise, your internet connection is at fault. If it’s the former, move on to the next step.

If you’ve been exploring your iPhone’s data-saving features, which let you specify which apps have access to your phone’s mobile data, then there’s a chance that you turned off mobile data for the Safari app. That means Safari will work when you’re connected to Wi-Fi but not to mobile data. (Try running Safari over Wi-Fi to test this.)

If that’s the case, then to turn mobile data back on for Safari, go to “Settings -> Mobile Data,” and then in the “Mobile Data” list, make sure the slider next to Safari is in the green “On” position.

Turn On Cellular Data For Safari App

Also read: 20 of the Best Siri Shortcuts for iOS Power Users

You may not know about this, but Safari for the iPhone has a whole load of experimental features that you can disable and enable as you please.

The problem with these, as the name suggests, is that they are indeed experimental and subsequently don’t all work properly. Disabling them one by one can fix Safari if it’s not working and help you discover which exact feature was causing the problem,

On your iPhone, go to “Settings -> Safari -> Advanced -> Experimental Features.”

Turn On Cellular Experimental Features For Safari App

If you have more than one feature enabled here, disable just one, then check to see if Safari works normally again. If it doesn’t, re-enable that feature (if you want it) and disable the next one. Keep repeating this procedure until Safari starts working again.

Turn Off Experimental Features For Safari

Also read: Everything You Need to Know About Using “Shared with You” in iOS 15

Try resetting your Wi-Fi connection and reconnecting to the network.

  • Go to “Settings -> Wi-Fi” and turn it off, then turn it back on after a few seconds.

Turn Off And Turn On Wifi

  • If you’re using mobile data, go to “Settings -> Mobile Data” and turn “Mobile Data” off and back on after a few seconds.

Turn Off And Turn On Mobile Data

  • If neither option works, go to “Settings -> Wi-Fi,” connect to a different Wi-Fi network, and try loading the web page again.

Change Wifi Network

If the problem persists, try restoring your network settings to their original configuration.

  • Go to “Settings -> General -> Transfer or Reset iPhone -> Reset” and choose “Reset Network Settings.”

Restoring Your Network Settings

Also read: How to Fix Contact Names Not Showing, Appearing as Numbers in iOS

Common Problems With Safari And How To Solve Them

By following the fixes we’ve mentioned above, you should be able to revive Safari and make it work normally again. However, there are some specific issues that commonly come up with Safari. Here’s how to solve them.

Problem: Safari Crashed and Won’t Open

If you’ve ever panicked after Safari closed unexpectedly and couldn’t get the app to start, you probably encountered a bug that affects Safari’s search engine suggestions. This issue can cause the app to crash, freeze, or fail to start altogether. Although the bug usually plagues devices running iOS 10, it can affect just about any iPhone or iPad.

How to Fix It: Disable Search Engine Suggestions

Go to “Settings” and choose “Safari” in your list of apps. Here, find “Search Engine Suggestions” and turn it off.

Turn Off Seqarch Engine Suggestions

This feature offers suggestions for what you can search for as you type into Safari’s search bar. Disabling it gets rid of the problem for many users.

Problem: Safari Is Gray (and Won’t Open)

Sometimes when you update your iPhone’s iOS to a newer version, you may encounter a bug that turns some apps gray and prevent them from opening.This bug causes Safari to stop working and turns its icon gray when you switch to another app while Safari is running in the background.

How to Fix It: Update Your Software

To solve this problem, update your iPhone to the latest version of iOS. Apple includes important bug fixes in each software update, so it’s important to keep your iPhone or iPad up to date. iOS 11.1 fixed this bug for most users, so be sure to update to 11.1 or greater if you’re running an older version of iOS.

Go to “Settings -> General,” choose “Software Update,” and install the latest update.

Update Ios Software

Also read: How to Update to iOS 17 Smoothly

Problem: Safari Is Slow

As powerful as your iPhone can be, it can get bogged down with all the extraneous information that it processes. If you notice that Safari takes longer to load pages or graphics, it may be time to do some housekeeping. Try clearing your browser history, website data, and cache to make Safari run more smoothly.

How to Fix It: Clear Your Data

To delete your cookies, cache, and browsing history, go to “Settings -> Safari,” choose “Clear History and Data,” and confirm that you want to go ahead. Safari will remember your AutoFill information if you choose this option.

Clear Website Data Safari

To keep your browsing history but clear your cache and cookies, first go to “Settings -> Safari -> Advanced.”

Safari Advance Settings Menu

There, choose “Website Data -> Remove All Website Data” and tap “Remove Now.” Note that Safari will not remember your AutoFill information if you choose this option.

Remove Website Data Safari 2

To remove only a portion of your browsing history, cache, and cookies, start by opening Safari and tapping the Bookmark icon. Here, open your history and tap “Clear.” Now Safari will give you the option to clear your history, cookies, and browsing data from the past hour, the past day, the past 48 hours, or from your entire history. Pick the relevant option.

Delete History Safari

Problem: Safari Still Isn’t Working

Although it sounds cliche, turning your phone off and back on again can be the solution to any number of Safari-related issues.

How to Fix It: Restart Safari or Reboot Your Phone

If none of the previous fixes help solve your problem, try restarting the app or rebooting your phone.

Image7

  • Swipe up from the bottom of the screen and press on the screen when your finger is near the center to open the multitasking view, and then swipe up on Safari to close it. This will reset Safari.
  • To shut down your phone, press and hold the sleep/wake button until a slider appears. Slide to the right to power off your phone. For iPhone X and above, press and hold the side button and one of the volume buttons until the slider appears. Then slide it to the right to power off your phone.

Also read: How to Block Websites on Chrome, Firefox, Edge, Safari, Android, and iOS

Frequently Asked Questions

How to fix "safari can't find server" on iphone.

The most probable and common reason behind the “Safari can’t find server” error is not with Safari but with your internet connection. Here are a few ways to fix it.

  • Reset your wireless router.
  • Turn mobile data off and turn it back on again.
  • Clear Safari cache and data.
  • Restart your iPhone.

How to reset Safari on iPhone?

To reset Safari on your iPhone, open the Settings app and scroll to the Safari settings. There, tap on “Clear History and Website Data” and the bottom of the page and follow up along with the pop-up on your screen to confirm the action. Once it’s complete, all your data and cookies will be wiped clean, and Safari will be as good as new.

Can you reinstall Safari on your iPhone?

Yes, just like any other app, you can uninstall Safari from your iPhone by holding down the Safari icon on the home screen and tapping “Remove app.” Then, visit the App Store, search for Safari, and reinstall it from there. Can’t find the Safari app to delete it? Here’s how to delete hidden apps .

Image credit: Flickr

Our latest tutorials delivered straight to your inbox

Ojash Yadav

Ojash has been writing about tech back since Symbian-based Nokia was the closest thing to a smartphone. He spends most of his time writing, researching, or ranting about Bitcoin. Ojash also contributes to other popular sites like MakeUseOf, SlashGear, and MacBookJournal.

Reverse A Video On Iphone

If Safari won’t open a page or work as expected on your Mac

If Safari won’t load a web page, stops responding, closes unexpectedly or otherwise isn’t working as expected, these solutions may help.

These solutions are for issues that can affect Safari on Mac, including issues such as these:

A web page is blank, won’t load all of its content or otherwise isn’t working as expected.

You can’t sign in to a web page, despite using the correct sign-in information.

A web page asks you to remove or reset cookies.

Safari slows down, stops responding or closes unexpectedly.

Reload the page

From the menu bar in Safari, choose View > Reload Page. Or press Command-R.

If Safari won’t reload the page, close Safari, then try again. If Safari won’t close, you can press Option-Command-Esc to force Safari to close .

If Safari reopens unwanted pages automatically, close Safari, then press and hold the Shift key while opening Safari. Find out how to control which windows Safari reopens automatically .

Install software updates and restart

Update macOS , which can include updates for Safari. If your Mac didn’t restart automatically, choose Apple menu  > Restart. Some important background updates will only take effect after restarting.

Check Safari extensions

If you’ve installed any Safari extensions, turn the extensions off. From the menu bar in Safari, choose Safari > Settings (or Preferences). Click Extensions, then untick each extension to turn it off. Find out more about Safari extensions .

If you find that an extension is causing the issue, make sure the extension is up to date.

Test with a private window

A website can store cookies, caches and other data on your Mac, and issues with that data can affect your use of the website. To prevent the website from using that data, view it in a private window: from the menu bar in Safari, choose File > New Private Window, or press Shift-Command-N.

If that works, use the following steps to remove the website's data, including its caches and cookies. The website can then create new data as needed. If it's a website that you sign in to, make sure you know your sign-in information before continuing.

Choose Safari > Settings (or Preferences), then click Privacy.

Click Manage Website Data.

Select the affected website from the list that's displayed.

Click Remove.

Click Done.

Open the website again in a non-private browser window.

Check Safari settings

The web page may not be compatible with one or more browser settings, which you can turn on or off as needed. From the menu bar in Safari, choose Safari > Settings (or Preferences). Then click Websites, Privacy or Security to access these settings:

Privacy settings . These settings apply to all websites. For example, a website may require that you allow cross-site tracking, show your IP address or allow cookies.

Security settings . These settings apply to all websites. For example, a website may require that you enable JavaScript.

Websites settings . These settings can be configured for specific websites. For example, a website may require that you allow pop-up windows, allow downloads, allow access to your camera or microphone, or turn off content blockers.

Check iCloud Private Relay

If you subscribe to iCloud+ and are using its Private Relay feature, try reloading the page without Private Relay: from the menu bar in Safari, choose View > Reload and Show IP Address. This menu item will only appear when Private Relay is turned on for your network. Find out more about iCloud Private Relay .

Check VPN or other security software

If you've installed VPN or other software that monitors or interacts with your network connections, that software could be affecting your use of the website or the internet. Find out about network issues related to VPN and other software .

Check network settings

Certain network settings, such as custom proxy settings or custom DNS settings , can affect access to content on the internet. Even if you haven’t changed these or other network settings yourself, you may have installed software that changed them for you.

To find out whether the issue is with the network settings on your Mac, try viewing the page from a different web browser or different device on the same network. Or reset your network settings by setting up a new network location on your Mac.

If the issue affects other devices and web browsers on the same network, the issue is probably with the website, and you should contact the website developer for help.

If the issue continues to only affect a particular web page, contact the website developer for help.

Find out how to block pop-up ads and windows in Safari .

Find out what to do if your iCloud or Safari bookmarks aren’t syncing .

safari bug fix

Related topics

iOS 15.3 and macOS 12.2 out now with critical Safari bug fix for iPhone and Mac

Patches released for iOS, iPadOS, macOS and WatchOS

Safari

Apple has rolled out new versions of its iOS, iPadOS and macOS operating systems , patching up a major security flaw in Safari across all of its devices.

This bug leaked users' Google data and browsing history that's stored within the browser, so if you're an Apple user, we recommend you update the operating system on your devices immediately.

The updates include iOS 15.3, iPadOS 15.3 and macOS Monterey 12.2, and while they don't add any new features other than "bug fixes and security updates", they're still "recommended for all users".

Apple has also released updates for Big Sur and Catalina (v11.6.3 and Catalina Security Update 2022-001 respectively) for anyone still on the older versions of macOS.

All patched up

Those aren't the only software updates released by Apple – watchOS 8.4, tvOS 15.3, and HomePod Software 15.3 have also been rolled out publicly.

The updated watchOS also fixes some bugs, particularly the issue that prevented some Apple Watch 7 users from properly charging their devices when using specific chargers .

Meanwhile, the latest HomePod update adds "performance and stability improvements" and Siri voice recognition for up to six users. It's worth noting that this particular update is region specific and applies to users speaking in English in India and in Italian.

Get daily insight, inspiration and deals in your inbox

Get the hottest deals available in your inbox plus news, reviews, opinion, analysis and more from the TechRadar team.

As for the newly updated tvOS, Apple hasn't shared any details on what the latest version brings, but we can assume it's another round of performance improvements.

  • How to run Windows 11 in macOS Monterey

Sharmishta Sarkar

Sharmishta is TechRadar's APAC Managing Editor and loves all things photography, something she discovered while chasing monkeys in the wilds of India (she studied to be a primatologist but has since left monkey business behind). While she's happiest with a camera in her hand, she's also an avid reader and has become a passionate proponent of ereaders, having appeared on Singaporean radio to talk about the convenience of these underrated devices. When she's not testing camera kits or the latest in e-paper tablets, she's discovering the joys and foibles of smart home gizmos. She's also the Australian Managing Editor of Digital Camera World and, if that wasn't enough, she contributes to T3 and Tom's Guide, while also working on two of Future's photography print magazines Down Under.

This handy feature has been promised to ChromeOS users for a while now - but it’s still stuck in development

Google releases speedy version of Chrome for ARM – a sign Windows 11 ARM-powered devices are finally going to make it big?

Huge backdoor discovered that could compromise SSH logins on Linux

Most Popular

By Alex Whitelock March 30, 2024

By David Nield March 30, 2024

By Wayne Williams March 30, 2024

By Rowan Davies March 30, 2024

By Hamish Hector March 30, 2024

By Marc McLaren March 30, 2024

By Cesar Cadenas March 29, 2024

By Sead Fadilpašić March 29, 2024

By Al Griffin March 29, 2024

  • 2 256TB SSDs could land before 2026 with a surprisingly low price — but will most likely use a controversial and popular trick borrowed from tape technology
  • 3 Samsung archrival plans construction of world's largest chip factory — at more than $90 billion, it will take more than 20 years to finish, so one wonders what other exciting tech will it produce
  • 4 Samsung can't blame Apple's iPhone monopoly for a lifetime of terrible software
  • 5 PC gaming handhelds should "feel like an Xbox" says Microsoft's Phil Spencer, but he's wrong – they could be something even better
  • 2 iOS 18 might break the iPhone's iconic app grid, and it's a change no one asked for
  • 3 The big Apple lawsuit explained: why Apple's getting sued and what it means for the iPhone
  • 4 macOS isn’t perfect – but every day with Windows 11 makes me want to use my MacBook full-time
  • 5 Microsoft has a potentially genius idea to make ray tracing work better even with lower-end GPUs

Apple working on a fix for Safari bug that leaks browsing history and Google ID

Avatar for Filipe Espósito

Earlier this week, FingerprintJS revealed a serious bug in Apple’s Safari web browser that lets anyone extract a user’s browsing history and even Google User IDs. As expected, Apple is now working on a fix for this bug, which is expected to be released to users very soon.

Based on a WebKit commit on GitHub , Apple engineers are already preparing a fix for the Safari bug that leaks user data. For those unfamiliar, WebKit is Apple’s browser engine that powers Safari and other web browsers. Since WebKit is an open-source engine, updates related to the bug are public and can now be seen on GitHub.

More specifically, the bug was found in the implementation of IndexedDB, which is a Javascript API used to store data. Malicious websites can use the exploit to see URLs recently visited by a user and even obtain your Google User ID, which can be used to find personal information about you.

Apple hasn’t provided details on when the fix will be available to users. However, as noted by MacRumors , the fix requires Apple to release updated builds of iOS 15 and macOS Monterey to include a new version of Safari using the latest WebKit engine.

Apple is currently running tests with iOS 15.3 beta and macOS Monterey 12.2 beta , so perhaps the next beta updates will bring the fix for the Safari bug. It’s worth noting that the WebKit version used in Safari 14, which is the one for iOS 14, is not affected by the bug.

More details about the exploit can be found on the FingerprintJS website .

FTC: We use income earning auto affiliate links. More.

Check out 9to5Mac on YouTube for more Apple news:

Safari

Filipe Espósito is a Brazilian tech Journalist who started covering Apple news on iHelp BR with some exclusive scoops — including the reveal of the new Apple Watch Series 5 models in titanium and ceramic. He joined 9to5Mac to share even more tech news around the world.

  • Mobile Site
  • Staff Directory
  • Advertise with Ars

Filter by topic

  • Biz & IT
  • Gaming & Culture

Front page layout

PATCH GAP —

No, it doesn’t just crash safari. apple has yet to fix exploitable flaw, webkit bug that was fixed upstream has yet to find its way into apple products..

Dan Goodin - May 26, 2021 8:04 pm UTC

No, it doesn’t just crash Safari. Apple has yet to fix exploitable flaw

Apple has yet to patch a security bug found in iPhones and Macs despite the availability of a fix released almost three weeks ago, a researcher said.

The vulnerability resides in WebKit, the browser engine that powers Safari and all browsers that run on iOS. When the vulnerability was fixed almost three weeks ago by open source developers outside of Apple, the fix's release notes said that the bug caused Safari to crash. A researcher from security firm Theori said the flaw is exploitable, and despite the availability of a fix, the bug is still present in iOS and macOS.

Mind the gap

“This bug yet again demonstrates that patch-gapping is a significant danger with open source development,” Theori researcher Tim Becker wrote in a post published Tuesday . “Ideally, the window of time between a public patch and a stable release is as small as possible. In this case, a newly released version of iOS remains vulnerable weeks after the patch was public.”

"Patch-gapping" is the term used to describe the exploitation of a vulnerability during the usually brief window between the time it’s fixed upstream and when it becomes available to end-users. In an interview, Becker said that the patch has yet to make its way into macOS as well.

The vulnerability stems from what security researchers call a type confusion bug in the WebKit implementation of AudioWorklet , an interface that allows developers to control, manipulate, render, and output audio and decrease latency. Exploiting the vulnerability gives an attacker the basic building blocks to remotely execute malicious code on affected devices.

To make the exploitation work in real-world scenarios, however, an attacker would still need to bypass Pointer Authentication Codes , or PAC, an exploit mitigation system that requires a cryptographic signature before code in memory can be executed. Without the signature or a bypass, it would be impossible for malicious code written by the WebKit exploit to actually run.

“The exploit builds arbitrary read/write primitives which could be used as part of a larger exploit chain,” Becker said, referring to proof-of-concept attack code his company has released. “It does not bypass PAC. We consider PAC bypasses to be separate security issues and thus should be disclosed separately.”

Theori said  that company researchers independently discovered the vulnerability but that it had been fixed upstream before they could report it to Apple.

“We didn't expect Safari to still be vulnerable weeks after the patch was public, but here we are... ” Becker wrote on Twitter.

This exploit was a fun challenge. We didn't expect Safari to still be vulnerable weeks after the patch was public, but here we are... https://t.co/jkEH7w498Q — Tim Becker (@tjbecker_) May 26, 2021

Eight Apple zero-days and counting

Further reading.

According to a spreadsheet maintained by Google’s Project Zero vulnerability research team, seven vulnerabilities have been actively exploited against Apple users since the beginning of the year. The figure rises to eight if you include a macOS zero-day that Apple patched on Monday. Six of the eight vulnerabilities resided in WebKit.

Apple representatives didn’t respond to an email seeking comment for this post.

reader comments

Channel ars technica.

These are the Safari bugs that have been fixed in the latest preview build

New bug and performance fixes.

Safari showing Apple site with new nav bar

Apple has released a new version of the Safari Technology Preview, the experimental browser used to test features for future releases of the Safari web browser.

In Safari Technology Preview release 170, you'll find bug fixes and performance improvements for CSS, Forms, Layout, JavaScript, Media, Popover, and Accessibility.

The Safari Technology Preview is a way for Apple to gather feedback on features before implementing them into release versions of Safari. The Preview can run alongside Safari and does not require a developer account to install. Apple says, "Get a sneak peek at upcoming web technologies in macOS and iOS with  Safari Technology Preview  and experiment with these technologies in your websites and extensions."

The latest 16.4 version is compatible with Macs on macOS Ventura and macOS Monterey 12.3 or later. You can download Safari Technology Preview here , or if you already have Safari Technology Preview installed, head to the Software Update pane of System Preferences, and you should see an update waiting to be downloaded and installed. 

Safari at WWDC 2023?

With WWDC 2023 starting on June 5, there's lots to be excited for in the world of Apple software. The likely announcement of macOS 14 could see some major new features for Safari alongside performance and other quality of life improvements.

While WWDC is only a few weeks away, the rumor mill for macOS 14 and Safari is still very quiet. So your guess is as good as ours as what Apple has up its sleeve. We'd like to see better widgets in macOS that could include integration with Safari somehow. 

Until then, we'll fidget and wait to see what exciting software updates and products Apple is mustering up. The rumors indicate a likely reveal of the VR headset as well as new software updates for iOS and iPadOS. If you're like us at iMore, we just can't wait!

Master your iPhone in minutes

iMore offers spot-on advice and guidance from our team of experts, with decades of Apple device experience to lean on. Learn more with iMore!

John-Anthony Disotto

John-Anthony Disotto is the How To Editor of iMore, ensuring you can get the most from your Apple products and helping fix things when your technology isn’t behaving itself. Living in Scotland, where he worked for Apple as a technician focused on iOS and iPhone repairs at the Genius Bar, John-Anthony has used the Apple ecosystem for over a decade and prides himself in his ability to complete his Apple Watch activity rings. John-Anthony has previously worked in editorial for collectable TCG websites and graduated from The University of Strathclyde where he won the Scottish Student Journalism Award for Website of the Year as Editor-in-Chief of his university paper. He is also an avid film geek, having previously written film reviews and received the Edinburgh International Film Festival Student Critics award in 2019.  John-Anthony also loves to tinker with other non-Apple technology and enjoys playing around with game emulation and Linux on his Steam Deck.

In his spare time, John-Anthony can be found watching any sport under the sun from football to darts, taking the term “Lego house” far too literally as he runs out of space to display any more plastic bricks, or chilling on the couch with his French Bulldog, Kermit. 

Love making playlists? This iPhone app is a must-have for Spotify users

Going on a trip over the summer? You need this pro-level iPhone and iPad packing app

Apple's new EU rules will give users a completely new way to pay for iPhone apps: Patreon

  • ChazMacs What are the bugs? The title says these are the bugs, but no bugs are listed in the article! More sloppy writing/editing... or was it Chat/GPT? More and more "news" sites are getting sloppy like this. It's really a shame, as it makes you look bad, and will lose audience, I suspect. Reply
  • View All 1 Comment

Most Popular

By Lloyd Coombes March 30, 2024

By Oliver Haslam March 29, 2024

By Becca Caddy March 29, 2024

By Connor Jewiss March 29, 2024

By Oliver Haslam March 28, 2024

  • 2 New iOS 18 and iPadOS 18 compatibility leak claims some devices are going to miss out this time around
  • 3 Time to upgrade — Your iPhone 6 Plus and iPad mini 4 are now obsolete and vintage, respectively
  • 4 Apple Watch Link Bracelets and Milanese Loops are being sold off cheap as rumors of future incompatibility swirl
  • 5 Been missing iOS betas? iOS 17.5's could hit your iPhone this week

safari bug fix

Stay connected

Trending news, two ways to play fall guys on mac – our experience , three ways to play rust on mac – our experience , 3 ways to play balatro on mac – our experience , 4 ways to play last epoch on mac – our experience , genshin impact characters explained , helldivers 2 samples – how to get them .

Safari not working

Safari not working 

safari bug fix

Experiencing difficulties with Safari on your Mac? Don’t fret – this comprehensive guide is here to help. Whether you’re facing issues with loading web pages, signing in, or dealing with unexpected browser behavior, these troubleshooting tips may be just what you need.

First, we’ll address some common issues that can plague Safari users on a Mac. Then, we’ll explore solutions that can help you overcome these challenges. And finally, we’ll delve into some additional settings and tools that might be worth checking out. Let’s dive in!

Why is Mac Safari not working?

There could be numerous reasons why your Mac’s Safari isn’t working, including a one-time bug, a missing update, a problematic extension, and more.

Some common issues you might encounter with Safari on your Mac include:

  • Empty web pages, partial content display, or other unforeseen behavior.
  • Inability to sign in to a particular site, despite entering valid login details.
  • Sites requesting cookie removal or reset.
  • Safari lagging, freezing, or suddenly shutting down.

Safari not working fix

If you are looking for a fix for your Safari not working as it should (or at all), we recommend trying the following troubleshooting methods that should help you resolve the problem:

Hit the refresh button

In Safari, head to the menu bar, click the View option and then select Reload Page .

reload page safari

Alternatively, you can use the Command-R keyboard combination to reload a web page. If Safari remains unyielding, close the app and attempt again. Should it persistently refuse to close, you can press together the Option , Command , and Esc keys to force it to quit.

If Safari reopens any unwanted sites, close it and then hold down the Shift key while reopening the browser. This manages which tabs and windows will automatically reopen in Safari.

Stay current with software updates and reboot

Upgrading macOS can also include Safari updates. If your Mac fails to restart on its own after updating, click on Apple menu > Restart. This ensures all vital background updates take effect.

Examine Safari extensions

Deactivate any Safari extensions by navigating to Safari > Settings (or Preferences) > Extensions and unchecking each one. If a troublesome extension is identified, verify it’s current. More details on Safari extensions can be accessed online.

extensions safari

Test out a private window

To stop websites from utilizing stored data (such as cookies and caches) that might be causing disruptions, view the site in a private window. Choose File > New Private Window or press Shift-Command-N. If successful, follow these instructions to eliminate the website’s data:

  • Navigate to Safari > Settings (or Preferences) > Privacy.

safari bug fix

  • Click Remove, followed by Done.
  • Re-access the website in a non-private browser window.

Adjust Safari settings

Some pages may be incompatible with specific settings in your browser. To check your Safari settings, open the browser’s menu from the menu bar, then go to Settings (or Preferences ), select the Websites tab, and then open Privacy (or Security ). Modify privacy, security, and website settings as required to determine a functional combination.

websites tab safari

Review iCloud Private Relay

For iCloud+ users employing the Private Relay feature, attempt reloading the page without it. Choose View > Reload and Show IP Address in Safari’s menu bar. This option is visible only when Private Relay is enabled. Additional information on iCloud Private Relay can be found online.

Check any VPN services or third-party security software you might be using

VPNs or other security software interacting with network connections could influence your browsing capabilities. Investigate potential network complications related to VPNs and similar software.

Assess network configurations

Altered proxy or DNS settings can impact access to online content. Determine if the issue persists across different browsers or devices on the same network, or reset your network settings by establishing a new network location on your Mac.

iPhone Safari not working

Are you tired of Safari, the native browser on your iPhone, iPad, or MacBook, not working as expected? Don’t worry, you’re not alone. Many Apple users face issues with Safari from time to time, but luckily, there are various solutions to get it back up and running.

Safari comes pre-installed on almost every Apple device, providing a fast and efficient browsing experience. However, occasionally, Safari may not work correctly, leaving you unable to access the internet. To help you get Safari back on track, we’ve compiled a list of possible fixes.

If you are having problems with your iPhone’s Safari not working, then here are the possible troubleshooting methods that you can try in order to take care of the issue:

Clear Safari cache

Clearing all of Safari’s data can also be helpful, particularly if you have a lower storage capacity on your iPhone or iPad. To clear Safari’s data, navigate to Settings > Safari > Clear History and Website Data. This will erase all extra data in the Safari app.

Update Safari

Keeping your iOS up-to-date can resolve issues with Safari. Apple is known for fixing widespread issues with their updates, so check for any available iOS updates on your iPhone or iPad.

A simple restart

First and foremost, try the classic solution: restart your device. Although it may sound like a cop-out solution, restarting your device can indeed help because this will clear its usable memory, speeding up Safari, and hopefully resolving any problems. If Safari is frozen or displaying a blank white screen, restarting your device might fix the issue.

Disable Safari Suggestions

Next, consider turning off Safari Suggestions. This relatively simple fix is often effective in resolving issues with Safari not loading or crashing. To disable suggestions, navigate to Settings > Safari > Safari Suggestions and toggle it off. While you’re at it, you can also turn off Search Engine Suggestions, as some users have reported this to be helpful.

Check your connection to the web

If you’re primarily connected to Wi-Fi, you may have disabled cellular data for Safari to save data usage. If your Wi-Fi isn’t functioning correctly, enabling cellular data could fix your issue. To do this, go to Settings > Cellular > Safari and toggle it on. Alternatively, try turning off Wi-Fi and connect using cellular data only. If this works, it indicates a network issue with your Wi-Fi.

Check your Screen Time and Content Restrictions settings

Have you ever altered your Screen Time settings or blocked certain websites? If so, try turning these settings off. Content Restrictions can inadvertently block websites you still want to use. To resolve this issue, go to Settings , then tap on Screen Time , open Content & Privacy Restrictions and then toggle it off if it’s currently enabled.

Reset the Network Settings

If you’ve encountered network-related issues before, resetting your Network Settings could help. To reset the Network Settings on your iPhone or iPad, go to Settings > General > Transfer or Reset iPhone (iPad) > Reset > Reset Network Settings. This will only reset your Network Settings and won’t erase other data on your device.

Enable JavaScript

Ensure that JavaScript is enabled on your device, as it’s crucial for displaying interactive content on websites. To check if JavaScript is on and enable it if necessary, head to Settings > Safari > Advanced on your iOS or iPadOS device.

Perform a Factory Reset

When all else fails, consider resetting your iPhone to factory default settings. This will erase all data on your iPhone, and you’ll need to set it up from scratch. However, it’s a highly effective method for resolving various software issues. To reset your device, go to Settings > General > Transfer or Reset iPhone (iPad) > Erase All Content and Settings.

If you’ve tried everything and Safari still isn’t working, consider using an alternative browser while waiting for the next iOS update, which might contain a fix. Plenty of great browsers are available in the App Store that can cater to your needs. In the meantime, you can also start a new discussion in the Apple Discussions Community to see if others are facing similar issues.

iPad Safari not working

If the Safari browser on your iPad is not working properly, then we recommend trying out the solutions we’ve provided for when Safari is having problems on an iPhone. Since both devices use a very similar operating system, what works on iPhone should also work on an iPad.

Mac sound not working

Mac is running slow

safari bug fix

Martina Nikolova

Leave a reply cancel reply.

Save my name, email, and website in this browser for the next time I comment.

Username or Email Address

Remember Me

Registration is closed.

  • GTA 5 Cheats
  • What is Discord?
  • Find a Lost Phone
  • Upcoming Movies
  • Nintendo Switch 2
  • Best YouTube TV Alternatives
  • How to Recall an Email in Outlook

Critical Mac update fixes Safari bug that leaks user data

Caleb Clark

A nasty bug in Safari has been discovered, and Apple has made available an update to MacOS Monterey and iOS that should solve the critical flaw.

The releases are MacOS Monterey 12.2 and iOS 15.3, both of which patch the vulnerability, which may have been exposing your browsing data. The release candidates are both currently available through GitHub, with official releases expected next week.

As originally reported by MacRumors , the issue revolves around WebKit and its implementation with IndexedDB JavaScript sites. Any websites using this API can see the names of other IndexedDB databases and any associated data.

Put simply, certain websites can see when you put personal info into other websites in the same browsing session. This problem is unique to Safari on Macs, iPads, and iPhones. Mobile versions of third-party browsers like Chrome are also affected because they rely on Apple’s WebKit.

  • 10 Mac trackpad gestures that everyone should be using
  • Apple quietly backtracks on the MacBook Air’s biggest issue
  • I never knew I needed this mini Mac app, but now I can’t live without it

WebKit is an open-source browser engine developed by Apple. All mobile browsers on iOS run on WebKit, but it is also used on devices such as Sony PlayStation consoles and Amazon Kindle e-readers. None of those devices, however, are affected by the bug.

The bug was discovered by a browser fingerprinting service called FingerprintJS. In response, they developed a website designed to show you user details about your Google account. The goal is to show whether your device is exposed.

According to MacRumors, “After updating to the ‌macOS Monterey‌ 12.2 RC and the iOS 15.3 RC, the demo website no longer detects any data.”

That shows the fix is working as intended. You can download the release candidate on GitHub, but there could be potentially other bugs. If you would rather wait, just make sure to update your device as soon it becomes available.

Apple responded rather quickly to the news of the bug. MacRumors first reported it on Sunday, January 16, and Apple had a fix available a few days later. Hopefully, the release candidates work well, and we will see an update available soon.

Editors' Recommendations

  • How to change the default apps on a Mac
  • Apple just announced the dates for WWDC 2024
  • The 6 best ways Macs work with your other Apple devices
  • The MacBook Pro is a good enough gaming laptop for me
  • 5 reasons your MacBook keeps restarting and how to fix it
  • Apple iPhone

Caleb Clark

I have a web browser confession to make: I’m an inveterate tab hoarder. I’ve tried to change. I've tried to cull open tabs and tried to resist opening new ones -- but somehow the open tab counter just keeps on rising. At this point, I think I’m beyond saving.

What I’ve learned is that I need a web browser that can accommodate me, that has learned to accept my tab-based failings without judgement or chastisement. And after many years of trying, it turns out that Safari is not that browser. The tab problem

When I transitioned to all-Apple computing, I knew there would be challenges. I assumed there would be many days and weeks of awkwardness before I truly felt at home on my Mac (and iPad, iPhone, and Apple Watch).

That's why it surprised me when I discovered how smooth much of the transition actually was. Here's everything I learned along the way, along with some tips on how I made it as seamless as possible. Retraining my muscle memory Both Windows and macOS have various features and functionality that aren't exactly hidden, but aren't entirely intuitive, either. Things like keyboard shortcuts, settings, windows management, and more build up over time. They get burned into our muscle memory, both physically and mentally. Switching to a new platform requires unlearning the old and learning the new.

We’ve finally made it into 2024, and if you’re of the Apple persuasion, it feels like there’s a huge amount to look forward to this year. Yet that’s not true for everything Apple makes -- in fact, this could be an incredibly quiet 12 months for the Mac.

I recently wrote about how 2024 is going to be packed with major releases from Apple, yet among all the goodies that will be coming our way this year, there’s only one Mac announcement that I’d consider notable for fans of Apple’s computers. And even then, I’m talking about the MacBook Air getting the M3 chip, something the MacBook Pro got back in 2023.

You are using an outdated browser. Please upgrade your browser to improve your experience.

macOS bugs causing sporadic browsing issues with Safari, Firefox, others

Mike Peterson's Avatar

Credit: Apple

safari bug fix

According to user reports on the Apple Support Communities, the Safari 14.1 update breaks functionality on popular websites like eBay. The issue appears to predominantly affect Safari 14.1 on macOS Catalina and macOS Mojave.

There are reports from developers about ongoing problems with the latest versions of Apple's browser, too. Google Chrome developer advocate Jake Archibald reports that localStorage in Safari 14.1 is broken, causing tabs with use the same localStorage for text boxes.

localStorage is broken in Safari 14.1. Tabs end up with seperate localStorage for reading, but the same localStorage for writing. This will likely result in data loss for users. (h/t @forresto ) https://t.co/5Ljxl4vvbH — Jake Archibald (@jaffathecake) May 4, 2021

Other reports indicate that Safari 14.1 for macOS Mojave and macOS Catalina also has problems with WebAuthN. According to Eclectic Light , Apple pulled the Safari 14.1 update for both of those macOS versions on May 1.

AppleInsider staff members have also run into website problems with macOS Big Sur and Safari 14.1. Problems across our staff don't stop at those browsers, since we've also noticed website functionality issues in Firefox and Google Chrome on sites like eBay and others.

As far as potential fixes, there doesn't appear to be anything surefire. Some users report that disabling JavaScript in Safari preferences seems to resolve some of the issues. The troubleshooting advice given by other users in the Apple Support Forums suggest that a clean reinstall of the operating system solves the problem, but AppleInsider can confirm that this is not a universal solution.

In the meantime, it appears that Apple is aware of the problems and is likely working on a fix, as evidenced by the removal of Safari 14.1 for macOS Mojave and macOS Catalina.

Top Stories

article thumbnail

Save up to $350 on every Apple M3 MacBook Pro, plus get up to $80 off AppleCare

article thumbnail

macOS 15 will get a big AI boost: what to expect at WWDC 2024

article thumbnail

iPhone 16 case leak includes vertical camera bump at the back

article thumbnail

iOS 18 is coming soon with AI, a new interface, and accessibility: what to expect at WWDC 2024

article thumbnail

Apple Ring rumors & research - what you need to know about Apple's next wearable

article thumbnail

Apple AI, visionOS 2.0, iOS 18: What to expect from Apple during WWDC 2024 on June 10

Featured deals.

article thumbnail

Blowout deals: Apple's MacBook Air up to $400 off, MacBook Pro starts at $899

Latest comparisons.

article thumbnail

M3 15-inch MacBook Air vs M3 14-inch MacBook Pro — Ultimate buyer's guide

article thumbnail

M3 MacBook Air vs M1 MacBook Air — Compared

article thumbnail

M3 MacBook Air vs M2 MacBook Air — Compared

Latest news.

article thumbnail

Apple will be holding WWDC 2024 from June 10, showing off its future operating system updates and maybe even new hardware. This is what has been rumored so far.

author image

Jon Stewart opens up about Apple interference in his show

After originally claims that his split with Apple TV+ was amicable, Jon Stewart has now revealed that the company blocked topics and even guests he wanted to cover on "The Problem with Jon Stewart."

author image

How to use Continuity Camera with Apple Music Sing on Apple TV 4K

You can use your iPhone or iPad to show yourself and friends on your Apple TV 4K performing karaoke with Apple Music Sing. Here's how.

author image

The Browser Company poaches Apple Safari design team member

The creators of Arc, a browser promising to browse for you with AI tools, have hired Charlie Deets, who was formerly one of two designers on the Apple Safari team.

author image

Apple Savings APY to decrease for first time on April 3

Apple Card customers taking advantage of the high-yield Apple Savings account will see their APY decrease for the first time from 4.5% to 4.4% on April 3.

article thumbnail

Apple AI research: ReALM is smaller, faster than GPT-4 when parsing contextual data

Apple AI research reveals a model that will make giving commands to Siri faster and more efficient by converting any given context into text, which is easier to parse by a Large Language Model.

article thumbnail

Apple staff offered Milanese Loop Apple Watch bands at 40% off

Apple has started to discount some of its Apple Watch bands for employees, but it is unclear if it is to prepare for changes with the next Apple Watch models.

article thumbnail

Migo Ascender stair-climbing vacuum, Qi2 gear, & TP-Link camera reviews on HomeKit Insider

On this episode of HomeKit Insider, Migo launches the Ascender stair-climbing robot, lots of Qi2 news, and HomeKit camera reviews.

author image

With WWDC still months away, rumors about Apple's inbound software updates are starting to surface. Here's what to expect from macOS in 2024.

Latest Videos

article thumbnail

WWDC 2024 will show off Apple's AI efforts on June 10

article thumbnail

iPhone 15 Pro Max review six months later: Still an exciting upgrade

Latest reviews.

article thumbnail

TP-Link Tapo Indoor cameras review: affordable HomeKit options with in-app AI tools

article thumbnail

ShiftCam LensUltra Deluxe Kit review: Upgrade your iPhone photo shooting game

article thumbnail

Keychron Q1 Max review: cushy, comfortable, costly

article thumbnail

{{ title }}

{{ summary }}

author image

  • You are here

Apple is in the works to fix a serious Safari bug that allows access to your Google ID

Apple is now in the works to fix a serious Safari bug that allows websites access to your Google ID

Apple working to resolve the Safari bug you can do basically nothing about

What is this safari bug exactly, is there a way to protect yourself.

https://m-cdn.phonearena.com/images/users/262-200/Iskra-P.webp

Enjoy the hottest mobile tech storylines, delivered straight to your inbox.

Recommended Stories

Things that are NOT allowed:

  • Off-topic talk - you must stick to the subject of discussion
  • Trolling - see a description
  • Offensive, hate speech - if you want to say something, say it politely
  • Spam/Advertisements - these posts are deleted
  • Multiple accounts - one person can have only one account
  • Impersonations and offensive nicknames - these accounts get banned

Popular stories

T-Mobile confirms new monthly fee for April 25: here's how you can avoid it

Latest News

Would you switch your smartwatch for a smart ring?

  • a. Send us an email
  • b. Anonymous form
  • Buyer's Guide
  • Upcoming Products
  • Tips / Contact Us
  • Podcast Instagram Facebook Twitter Mastodon YouTube Notifications RSS Newsletter

Apple Releases Safari Technology Preview 191 With Bug Fixes and Performance Improvements

Apple today released a new update for Safari Technology Preview , the experimental browser Apple first introduced in March 2016. Apple designed the ‌Safari Technology Preview‌ to test features that may be introduced into future release versions of Safari.

Safari Technology Preview Feature

The current ‌Safari Technology Preview‌ release is compatible with machines running macOS Ventura and macOS Sonoma , the latest version of macOS that Apple released in September 2023.

The ‌Safari Technology Preview‌ update is available through the Software Update mechanism in System Preferences or System Settings to anyone who has downloaded the browser . Full release notes for the update are available on the WebKit blog .

Apple's aim with ‌Safari Technology Preview‌ is to gather feedback from developers and users on its browser development process. ‌Safari Technology Preview‌ can run side-by-side with the existing Safari browser and while designed for developers, it does not require a developer account to download.

Get weekly top MacRumors stories in your inbox.

Popular Stories

maxresdefault

Apple to Launch New iPad Pro and iPad Air Models in May

General Apps Messages

Google Reveals When to Expect RCS Support on iPhone for Improved Texting With Android Users

airtag new orange

Criminals in Montreal Using AirTags to Steal Vehicles

top stories 30mar2024

Top Stories: WWDC 2024 Announced, New iPads Delayed, and More

iphone 16 cases sonny dickson 1

First iPhone 16 Cases Outline New Rear Vertical Camera Bump

Apple iPhone 15 Pro spatial video capture lifestyle

$3 App Shoots Better Quality Spatial Video Than iPhone's Camera App

Next article.

Apple Self Service Repair Program iPhone

Our comprehensive guide highlighting every major new addition in iOS 17, plus how-tos that walk you through using the new features.

ios 17 4 sidebar square

App Store changes for the EU, new emoji, Podcasts transcripts, and more.

iphone 15 series

Get the most out your iPhone 15 with our complete guide to all the new features.

sonoma icon upcoming square

A deep dive into new features in macOS Sonoma, big and small.

ipad pro 2022 square upcoming

Revamped models with OLED displays, M3 chip, and redesigned Magic Keyboard accessory.

Apple iPad Air hero color lineup 220308

Updated 10.9-inch model and new 12.9-inch model, M2 chip expected.

wwdc 2024 upcoming square

Apple's annual Worldwide Developers Conference will kick off with a keynote on June 10.

ios 18 upcoming square

Expected to see new AI-focused features and more. Preview coming at WWDC in June with public release in September.

Other Stories

iPhone 16 Pro Sizes Feature

3 days ago by Tim Hardwick

iphone 15 galaxy s24 ultra corning glass

3 days ago by Juli Clover

Generic iOS 18 Feature Yellow Iridescent

4 days ago by MacRumors Staff

OS X Daily

Tips & Tricks

Troubleshooting, safari 17.3.1 update for macos ventura & monterey fixes overlapping text bug.

Safari icon

Apple has released Safari 17.3.1 as a software update for macOS Monterey and macOS Ventura.

The small Safari update appears to resolve the same overlapping text bug that was patched with macOS Sonoma 14.3.1 , iOS 17.3.1, iPadOS 17.3.1 , and watchOS 10.3.1. When users experience this bug, it can look like text is either disappearing (even when typing), or the text can be overlapping other text, and the bug can make the user experience difficult.

If you’re continuing to run MacOS Ventura or MacOS Monterey on a Mac, this is a recommended bug fix update.

Downloading Safari 17.3.1 Update

MacOS Ventura users can find Safari 17.3.1 available as a software update through  > System Settings > General > Software Update.

MacOS Monterey users can find Safari 17.3.1 as an update through  > System Preferences > Software Update.

The update should not take long to install.

What about updating Safari to 17.3.1 in macOS Sonoma, iPhone, and iPad?

The same bug fix and Safari update is included in the recently released macOS Sonoma 14.3.1 update .

Additionally, iOS 17.3.1, iPadOS 17.3.1 , and watchOS 10.3.1 patches the same bug on iPhone, iPad, and Apple Watch, respectively.

Therefore, devices running those versions of system software (or newer) will not see the Safari update available.

Release Notes for Safari 17.3.1

There’s not much particular information about Safari 17.3.1 (or Sonoma 14.3.1 for that matter), but the update is listed on the Apple security updates and Rapid Security Responses webpage here .

If you have any additional details or notes about Safari 17.3.1 for Monterey or Ventura, share with us in the comments.

Enjoy this tip? Subscribe to our newsletter!

Get more of our great Apple tips, tricks, and important news delivered to your inbox with the OSXDaily newsletter. 

You have successfully joined our subscriber list.

.

Related articles:

  • MacOS Monterey Problems – Fixing Issues with macOS 12
  • macOS Monterey Released, Download Now
  • How to Use Sidecar in MacOS Sonoma & Ventura
  • How to Install macOS Monterey/Ventura Updates Without Installing Sonoma

» Comments RSS Feed

I have gave me new update software in this IPhone 6

thnx for the info…

Leave a Reply

Name (required)

Mail (will not be published) (required)

safari bug fix

Subscribe to OSXDaily

Subscribe to RSS

  • - Fix a Repeating “Trust This Computer” Alert on iPhone & iPad
  • - How to Install Windows WSL (Windows Subsystem for Linux)
  • - How to Fix the Apple Watch Squiggly Charging Cable Screen
  • - Can You Stop Mirroring Camera on MacBook? Yes… Sometimes
  • - Create a Resume with Pages on Mac, iPhone, iPad
  • - iOS 16.7.7 & iPadOS 16.7.7 Released for Older iPhone & iPad Models
  • - WWDC 2024 Set for June 10-14, Expect iOS 18, macOS 15, visionOS 2, etc
  • - MacOS Sonoma 14.4.1 Update Released with Bug Fixes & Security Updates
  • - iOS 17.4.1 Update Released for iPhone & iPad with Bug Fixes & Security Enhancements
  • - USB Hub & External Monitors Not Working After MacOS Sonoma 14.4 Update for Some Mac Users

iPhone / iPad

  • - How Secure are Personal Hotspot Connections from iPhone?
  • - NewsToday2: What it is & How to Disable NewsToday2 on Mac
  • - Use Both Dark & Light Mode Themes Per App on Mac with Gray
  • - Fix “warning: unable to access /Users/Name/.config/git/attributes Permission Denied” Errors
  • - Why Did My iPhone Alarm Stop Automatically & Turn Itself Off?

Shop on Amazon to help support this site

About OSXDaily | Contact Us | Privacy Policy | Sitemap

This website is unrelated to Apple Inc

All trademarks and copyrights on this website are property of their respective owners.

© 2024 OS X Daily. All Rights Reserved. Reproduction without explicit permission is prohibited.

Stack Exchange Network

Stack Exchange network consists of 183 Q&A communities including Stack Overflow , the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Q&A for work

Connect and share knowledge within a single location that is structured and easy to search.

How can I track a bug fix for Safari?

We have been seeing an issue on Safari, starting with Safari 14.1 (macOS 11.3), where local storage was not synchronised across tabs (more info: https://twitter.com/jaffathecake/status/1389493762129375232 ). It was not fixed in the recent macOS release — 11.4 — either. How can we track such bugs? How can we know which future release is tracking this update?

I have tried Feedback Assistant and Apple Communities already. Any other suggestions?

Background: Copied from tweet: Tabs end up with separate localStorage for reading, but the same localStorage for writing. This will likely result in data loss for users. More info here . Also, any cross-tab communication that relies on the 'storage' event Demo

  • local-storage

sred31's user avatar

  • Can you include the details from the tweet? It doesn't appear to be working. –  Burgi May 28, 2021 at 9:41
  • @Burgi Copied from tweet: Tabs end up with separate localStorage for reading, but the same localStorage for writing. This will likely result in data loss for users. Bug: bugs.webkit.org/show_bug.cgi?id=225344 . Also, any cross-tab communication that relies on the 'storage' event (Demo: t.co/RsrbcSm9UI?amp=1 ). –  sred31 Jun 1, 2021 at 4:51
  • You should add that to your post. If the tweet is ever deleted, future people will not be able to understand the context. Please see How to Ask and take our tour . –  Burgi Jun 1, 2021 at 8:19
  • You cannot. Apple software development is not public. Not even WebKit. –  Daniel B Jun 2, 2021 at 6:08

You must log in to answer this question.

Browse other questions tagged macos safari local-storage bug ..

  • The Overflow Blog
  • Will antitrust suits benefit developers?
  • Are long context windows the end of RAG?
  • Featured on Meta
  • New Focus Styles & Updated Styling for Button Groups
  • Upcoming initiatives on Stack Overflow and across the Stack Exchange network
  • Google Cloud will be Sponsoring Super User SE

Hot Network Questions

  • Traffic is too loud to hear you
  • Temporarily replacing one pane of glass in a double-pane door
  • Does a direct flight emit more CO2 than a flight with a layover?
  • How many cacti can I plant here?
  • Implementing guard trace/ring in PCB design for opamp having high impedance input
  • Behaviour of Functions in Sourced Scripts
  • Circles crossing every cell of an 8x8 grid
  • 404 URL No Longer Exists with REST API Call
  • Drawing a set partition
  • Why do we associate negative sign to electric charges when they are a scalar quantity?
  • How to get random polygons with points ordered mathematical positive?
  • ROS2 ubuntu lunar purged but still preventing Ubuntu upgrade from 23.04 to 23.10
  • Node in unwanted position using tikzpicture
  • With the recent security issue with xz, what should we do before using HomeBrew again?
  • How does a Linux operating system stand going back in time (when applying winter time for example)? Going back a second, would it be the same problem?
  • Skiplagging consequences
  • Why does A = {1 , A} violate the Axiom of Regularity?
  • Loop manipulation subgroup of the braid group
  • top-alignment of tables in a table
  • Is it appropriate to ask for a raise?
  • How would you work out the value of t? I understand the basic law of indices but can't wrap my head around this.
  • Space shooter game using pygame
  • Is there something in international law that you can't bomb the embassy of country X in country Y (to kill a HV target) if you're at war with both?
  • Sewage Pump Controller parts nomenclature

safari bug fix

Reporting Bugs

1. check your webkit version, 2. search bugzilla, 3. create a bugzilla account, 4. file the bug.

So you found a bug? Here are 5 steps to getting it fixed:

To make sure you’re not wasting your (and our) time, you should be using the latest version of WebKit before you file your bug. First, you should download the latest WebKit build archive build to be sure you have the latest version. If you’ve done this and you still experience the bug, go ahead to the next step.

Now that you have the latest WebKit version and still think you’ve found a WebKit bug, search through Bugzilla first to see if anyone else has already filed it. This step is very important! If you find that someone has filed your bug already, please go to the next step anyway, but instead of filing a new bug, comment on the one you’ve found. If you can’t find your bug in Bugzilla, go to the next step.

You’ll need to create a Bugzilla account to be able to report bugs and to comment on them. If you’ve registered, proceed to the next step.

Now you’re ready to file a bug on the WebKit product . The Writing a Good Bug Report document gives some tips about the most useful information to include in bug reports. The better your bug report, the higher the chance that your bug will be addressed (and possibly fixed) quickly!

5. Next Steps

Once your bug is filed, you’ll receive email when it’s updated at each stage in the bug life cycle . After the bug is considered fixed, you may be asked to download the latest WebKit Build Archive and confirm that the fix works for you.

eSecurity Planet

Vulnerability Recap 4/1/24: Cisco, Fortinet & Windows Server Updates

eSecurity Planet content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More .

Vendors and researchers disclosed a wide range of vulnerabilities this week from common Cisco IOS, Fortinet, and Windows Server issues to more focused flaws affecting developers (PyPI), artificial intelligence (Ray, NVIDIA), and industrial controls (Rockwell Automation). While most issues can be fixed through prompt patching and updating, a few remain unfixed and may require more significant changes to the security stack to block possible attacks.

March 22, 2024

Emergency out-of-band windows server security updates.

Type of vulnerability (or attack): Memory leak.

The problem: The March 12th Microsoft security patches introduced a memory leak flaw in the local security authority subsystem service (LSASS) process that consumes all physical and virtual memory on server Domain Controllers. When either on-premise or cloud-based Active Directory domain controllers process Kerberos authentication requests, the leak causes the LSASS process to stop responding and the domain controller will unexpectedly restart.

The fix: Apply the emergency fixes issued by Microsoft for:

  • Windows Server 2022
  • Windows Server 2019
  • Windows Server 2016
  • Windows Server 2012 R2

Attackers Actively Exploit Fortinet Enterprise Management Server SQLi Flaw

Type of vulnerability: SQL injection (SQLi) flaw.

The problem: A SQLi flaw tracked as CVE-2023-48788 permits remote code execution (RCE) with SYSTEM privileges in low complexity attacks that don’t require user interaction. Horizon3 published an analysis and proof of concept to exploit Fortinet’s FortiClient Enterprise Management Server (EMS).

The US Cybersecurity & Infrastructure Security Agency (CISA) added this exploit to their vulnerability catalog indicating active exploitation in the wild. Current ShadowServer statistics show over 300,000 potentially vulnerable servers with open connections to the internet.

The fix: Update affected versions ASAP:

  • FortiClient EMS 7.2: Upgrade versions 7.2.0 through 7.2.2 to version 7.2.3 or above
  • FortiClient EMS 7.0: Upgrade versions 7.0.1 through 7.0.10 to version 7.0.11 or above

March 25, 2024

Hackers pollute python package index open-source libraries .

Type of vulnerability (or attack): Malicious library code.

The problem: Hackers placed malicious code into Python Package Index (PyPI) open-source library repositories using lookalike (aka, typosquatting) package names to trick developers into inserting the malicious code into projects. Checkmarx estimates over 170,000 developers use affected libraries and might possess corrupted code. The corrupted code steals information such as Telegram session data, files, keystrokes, Instagram session tokens, and more.

On March 28th, PyPI administrators temporarily suspended new project creation and new registration to block additional malicious uploads. Checkmarx posted a list of the malware packages detected and removed from the PyPI repository.

The fix: Checkmarx published indicators of compromise and libraries to remove, but developers should also apply a website and application vulnerability scanner such as AppScan or Invicti to perform software composition analysis and locate malicious libraries and code components.

For more options to protect the development security and operations (DevSecOps) process, read about the best DevSecOp tools .

March 26, 2024

Apple update fixes potential arbitrary code execution flaw.

Type of vulnerability: Arbitrary code execution (ACE).

The problem: Decoding videos with large frame sizes on iOS and macOS devices could trigger an integer overflow flaw made possible by an integer overflow flaw and trigger an out-of-bounds write to memory. Google Project Zero researcher Nick Galloway reported the bug, tracked as CVE-2024-1580 , that attackers could use for ACE.

The fix: Most Apple products download updates automatically, but check to ensure users apply the updates:

  • iOS and iPadOS: Versions 17.4.1 or 16.7.7
  • visionOS: Version 1.1.1
  • macOS: Versions Sonoma 14.4.1 or Ventura 13.6.6
  • Safari: Version 17.4.1 for macOS Monterey and macOS Ventura

OpenSource AI Framework Under Attack via Disputed Vulnerability

The problem: Many organizations, including Amazon, LinkedIn, and Netflix, use the AI framework Ray to train ChatGPT on huge server clusters. Developed by Anyscale, Ray allows any user to send unauthenticated HTTP requests to the dashboard, and Anyscale maintains that the lack of authentication is intentional and that any use of the framework outside of a fully controlled network violates best practices .

However, Oligo Security researchers “found that thousands of publicly exposed Ray servers all over the world were already compromised.” Oglio tracks vulnerability CVE-2023-48022 , rated CVSS 9.8 (out of 10), and calls it Shadow Ray . Without authentication, attackers may execute ACE to steal data or passwords, infect AI models during the training stages, launch supply chain attacks, drain payment accounts, or subvert clusters to run cryptomining.

The fix: The dispute prevents the vulnerability’s inclusion in most vulnerability scanners. To block further attacks, search for Ray instances, run Anyscale tools to detect exposed clusters, and ensure they only run within fully controlled networks. Exposed instances should be assumed to be compromised, so execute incident response plans to inspect clusters, users, exfiltrated data, and AI models for signs of compromise.

Rockwell Automation Fixes 10 Industrial Controls Flaws That Could Crash Systems

Type of vulnerability: Heap-based buffer overflow, improper authentication, improper input validation (2), improper traffic throttling, improper restriction of operations within the bounds of a memory buffer, out-of-bounds read, out-of-bounds write, uninitialized pointer access, and use-after-free flaws.

The problem: Rockwell Automation, along with CISA , provided advisories, updates, and workarounds for three different industrial control solutions: Arena Simulation, FactoryTalk View ME on PanelView Plus 7 Boot Terminal, and PowerFlex 527. Many different types of vulnerabilities ultimately lead to a common issue: unexpected system crash.

Security researcher Michael Heinzl reported the six Arena Simulation vulnerabilities to Rockwell Automation that enable attackers to insert unauthorized code or trigger denial of service conditions. Most of these vulnerabilities require users to open malicious files within the network.

The FactoryTalk View ME on PanelView Plus 7 Boot Terminal flaw neglects to check for authentication for the restart process, so attackers could unexpectedly restart the product without permission. The three PowerFlex 527 flaws perform improper input validation and allow uncontrolled resource consumption that attackers could use to crash systems or disrupt CIP communication to force manual restarts for recovery.

The fix: Rockwell Automation offers specific remediation for each product and links to updated versions within their announcement pages (linked above):

  • Arena Simulation: Upgrade to version 16.20.03 and don’t open untrusted files from unknown sources to mitigate an issue within the Microsoft dynamic library link file.
  • FactoryTalk View ME on PanelView Plus 7 Boot Terminal: Upgrade to a corrected version of V11, V12, V13, or V14 or follow security best practices.
  • PowerFlex 527: Currently, no fix exists and Rockwell Automation recommends isolating the installation via network segmentation , disabling web servers, and following best practices.

NVIDIA Fixes ChatRTX User Interface Vulnerabilities, One High Risk

Type of vulnerability: Improper privilege management (high risk) and cross-site scripting (XSS).

The problem: NVIDIA’s ChatRTX connects large language models (LLMs) to an organization’s content and data. In the security advisory, NVIDIA discloses UI flaws that could lead to local escalation of privileges, information disclosure, data tampering, code execution, and denial of service.

The fix: Update the latest ChatRTX software update from NVIDIA.

March 27, 2024

Cisco patches 16 high & medium vulnerabilities in access point, ios & more.

Type of vulnerability: Access control list bypass, authorization bypass, boot bypass, command injection, denial of service (11), and privilege escalation.

The problem: Cisco announced a number of important updates to fix vulnerabilities in Cisco IOS and IOS XE (8 high, 4 medium severity), Cisco Access Point (2 high, 1 medium severity), Cisco Catalyst Center (1 medium severity), and Cisco Aironet Access Point (1 medium severity). CISA also issued an alert encouraging prompt updates since the most serious vulnerabilities could cause denial of service and attackers could trigger events remotely without authentication.

The fix: Cisco recommends prompt application of patches. Only one high and two medium vulnerabilities offer any option for a workaround to remediate the vulnerability.

JetBrains Patches 26 Security Issues with TeamCity Version 2024.03 

Type of vulnerability: Disclosed vulnerabilities include arbitrary file removal, open redirect, two-factor authentication (2FA) bypass, unauthenticated administration registration, XML external entity injection, and XSS.

The problem: JetBrains released TeamCity 2024.03 , the latest upgrade to their build management and continuous integration server. In addition to many new features, bug fixes, and performance improvements, the new release fixes 26 security problems. However, to lessen potential compromise for customers, JetBrains only discloses select vulnerabilities and keeps the others undisclosed.

The fix: JetBrains recommends prompt installation of updates , and starting with this latest version, the TeamCity software will auto-download light security patches and prompt administrators to install them.

Splunk Enterprise Updates Fix High Severity Vulnerabilities

Type of vulnerability: Authentication token exposure, command safeguards bypass, third-party package vulnerabilities.

The problem: Splunk issued advisories for fixes to Splunk Enterprise and Splunk Universal Forwarder. The largest number of updates address third-party updates in Splunk Enterprise and Universal Forwarder that range between high and low in severity.

The highest-rated Splunk vulnerability, CVE-2024-29946, rated CVSS 8.1 (out of 10), allowed successful phishing attacks to initiate a browser request for command safeguards bypass in the Splunk Enterprise and Splunk Cloud Platform Dashboard Examples Hub. The token validation process bug in Splunk Enterprise, CVE-2024-29945, rated 7.2 and could allow debug features to expose authentication tokens in log files and internal indexes.

The fix: Update Splunk products to fixed versions (or higher):

  • Splunk Enterprise 9.0: Update to version 9.0.9
  • Splunk Enterprise 9.1: Update to version 9.1.4
  • Splunk Enterprise 9.2: Update to version 9.2.1
  • Splunk Cloud: Update to version 9.1.2312.100
  • Splunk Universal Forwarder 9.0: Update to version 9.0.9
  • Splunk Universal Forwarder 9.1: Update to version 9.1.4
  • Splunk Universal Forwarder 9.2: Update to version 9.2.1

Struggling to keep up with vulnerabilities? Consider a vulnerability management tool to prioritize, track and manage vulnerabilities.

March 29, 2024

Xz utils backdoor found in fedora development & experimental linux versions.

Type of vulnerability: Supply chain malicious code.

The problem: Red Hat security teams issued an emergency announcement to immediately stop using Fedora 41, Fedora Rawhide, or any Linux version running the xz data compression utilities versions 5.6.0 and 5.6.1. These versions of the libraries contain malicious code that introduces a backdoor, CVE-2024-3094 rated CVSS 10 (out of 10), into Linux environments.

The fix: Red Hat recommends downgrading to Fedora Linux 40, immediate cessation of any Fedora Rawhide versions, and downgrading openSUSE versions .

Vulnerability Recap 3/25/24 – More Ivanti Issues to Patch

  • Key Steps of the Patch Management Process

Featured Partners: Vulnerability Management Software

SanerNow Vulnerability Management Tool

Get the Free Cybersecurity Newsletter

Strengthen your organization’s IT security defenses by keeping up to date on the latest cybersecurity news, solutions, and best practices.

Previous article

Next article

Chad Kime Avatar

Subscribe to Cybersecurity Insider

Strengthen your organization’s IT security defenses by keeping abreast of the latest cybersecurity news, solutions, and best practices.

IT Security Resources

Businessman interacting with a virtual warning sign surrounded by technology related icons.

What Is Data Loss Prevention (DLP)? Definition & Best Practices

Blue digital binary data fading to a blur on computer screen.

LastPass Review 2024: Features, Pricing, Pros & Cons

Review featured graphic with LastPass logo.

15 Best Encryption Software & Tools for 2024

Virtual encrypted key on a digital quantum background.

Top Cybersecurity Companies

Top 10 cybersecurity companies.

  • 1 Uniqkey – Business Password Manager

See full list

Get the Free Newsletter!

Subscribe to Cybersecurity Insider for top news, trends & analysis

Related Articles

Open red digital padlock on dark red background.

Vulnerability Recap 3/19/24 – Microsoft, Fortinet & More

Vulnerability recap.

VulnRecap 3/11/24 – JetBrains & Atlassian Issues Persist

Using Apple’s iCloud Passwords Outside Safari

We regularly recommend using a password manager like 1Password, and for good reason. Passkeys may eventually take over—and I hope to explore them soon—but until that time, we’re stuck with passwords, and managing them manually is less secure and vastly more work. For many years, solutions like 1Password, BitWarden, Dashlane, and LastPass (which I no longer recommend—see “ LastPass Publishes More Details about Its Data Breaches ,” 3 March 2023) fell into the must-have category.

Apple’s Keychain Access utility has long provided basic password management capabilities in macOS but has never been particularly usable. With macOS 12 Monterey, iOS 15, and iPadOS 15, Apple gave passwords a better user-facing interface in System Preferences and Safari on the Mac and the Settings app on the iPhone and iPad. Although the settings screens are labeled Passwords and the iCloud-based password syncing feature is called iCloud Keychain, Apple doesn’t seem to have a formal name for the totality of these password management features, making it hard to talk about them in the same sentence as something like 1Password. For this article, I will use the name iCloud Passwords for reasons that will soon become obvious.

Although iCloud Passwords didn’t—and still doesn’t—have full feature parity with third-party password managers, it was pretty good. It offered all the basics, such as auto-fill, editing, searching, and even syncing through iCloud Keychain. Over time, Apple added support for one-time passwords, password sharing, and more. Importantly, it’s also completely free.

Despite these improvements, iCloud Passwords suffered in one significant way: it worked only in Safari. On the iPhone and iPad, that wasn’t a problem because other Web browsers relied on the same WebKit engine as Safari. (Apple also allowed Safari to treat third-party password managers as first-class alternatives.) But Mac users who wanted to use Chromium-based browsers like Arc, Brave, Google Chrome, Microsoft Edge, Opera, and Vivaldi, or Mozilla’s Firefox couldn’t take advantage of iCloud Passwords.

In 2021, Apple released the iCloud Passwords extension for Google Chrome, but only for Windows. In July 2023, Apple updated it to version 2.0, adding support for Mac versions of Google Chrome running in macOS 14 Sonoma. Although I’m happy with 1Password, I’ve been using iCloud Passwords for the past month in Arc to see if I could recommend iCloud Passwords for those who don’t rely on Safari. While I miss features from 1Password, the answer is yes: iCloud Passwords works fine. At least that’s true for me—I see reviews on the Chrome Web Store page that claim it doesn’t work or broke after some update, but I’ve been using it long enough that I’m comfortable saying it’s functional.

Although Apple released iCloud Passwords only for Chromium browsers—and it seems to work equally as well in all the variants I’ve tried—the company has done nothing for Firefox users. However, an independent developer named Aurélien recently published a Firefox add-on also called iCloud Passwords , so that’s an option for those running Sonoma or recent versions of Windows—it doesn’t work for earlier versions of macOS. It’s not yet well-known, with only 716 users last I checked (versus 2 million for the iCloud Passwords Chrome extension), but I’ve installed it and verified that it works. Although I’m a little hesitant to recommend an independent add-on that interacts with a system-wide password store, it’s open source, and anyone can view its code on GitHub .

Passwords Settings

Before we get to the specifics of using iCloud Passwords in a Chromium browser, I want to review the basics of password management in macOS. You access your passwords in System Settings > Passwords or Safari > Settings > Passwords —they’re the same—and you must authenticate every time you go there. Touch ID or Apple Watch authentication makes that a lot easier.

iCloud Passwords in System Settings

Let’s look at all the options from the top:

  • Search field: Use this to find logins in the list below by searching for the site name or username. Unlike 1Password, you can’t search for strings contained in your passwords.
  • + menu: Choose New Password or New Shared Group as desired. Most of the time, you’ll create new logins while setting up an account on a website—iCloud Passwords offers to remember the login information for you. More on shared groups shortly.
  • ••• menu: Apple puts the Import and Export commands in this unhelpfully labeled menu. The import/export format is CSV, and Apple warns that exported passwords will be stored unencrypted. (As an aside, I think using + and ••• to label menus is borderline criminal interface design, but it’s just one of many decisions in System Settings that will make its designers first up against the wall when the revolution comes.)

iCloud Passwords Security Recommendations

Nothing in Passwords Settings will set the world on fire, but Apple has provided a solid set of basic features.

iCloud Passwords in a Browser

To autofill your passwords in a Chromium browser like Arc, Brave, or Google Chrome, you need to install Apple’s iCloud Passwords extension from the Chrome Web Store. That’s as simple as clicking the Add to Chrome button and acknowledging that you want to install when prompted.

iCloud Passwords Chrome extension

How you interact with extensions varies a bit by browser, though most let you add them to a toolbar. In Chromium browsers other than Arc (which has a bug in this area), clicking a login form displays a notification that you can click to enable Password AutoFill. Arc has no such toolbar, but choosing Extensions > iCloud Passwords has the same effect as clicking the toolbar button or the notification.

iCloud Passwords enable autofill

However you invoke it, iCloud Passwords presents you with two dialogs: a system-level dialog with a verification code and a browser-level dialog into which you enter it. If you make a mistake typing, you’re instantly presented with another code.

iCloud Passwords verification code

Although this verification approach is straightforward, it’s required for every launch of the Web browser, so you may end up typing a lot of verification codes. It’s much easier to use biometric authentication via Touch ID or an Apple Watch in 1Password; I presume other password managers also support biometric authentication.

Once you’ve enabled Password AutoFill, it’s trivially easy to use. Just click in a login form, and iCloud Passwords detects that action and presents you with passwords that match the domain of the site you’re on. Click one to enter its information in the login form fields. Typically, only a single password will appear, but if you have multiple logins at different sites within the same domain, as I do in the screenshot below, you get to pick one.

iCloud Password autofill

(As an aside, this domain detection is one of the key reasons to use a password manager—they can’t be fooled into helping you enter a password onto a malicious site pretending to be something else. A human might not notice, but app1e.com isn’t apple.com in the eyes of a password manager.)

If a login form has both a username and password field, iCloud Passwords will autofill both. If the login process first requires you to enter your username, followed by the password after a form or page refresh, you’ll likely have to click again to autofill the password separately. 1Password is better at injecting the password into the second field that appears without requiring manual intervention.

One last thing. If you need to create a new account, iCloud Passwords almost always notices and offers to save your credentials. What it doesn’t do, unfortunately, is create a secure password for you. Instead, it suggests creating a strong password in System Settings > Passwords or opening the page in Safari (below left, ignore the broken graphic icon). Indeed, Safari automatically generates strong passwords and saves them to your password collection when you click Use Strong Password (below right). So, the better part of valor is to switch to Safari when creating new accounts and then switch back to log in with the new credentials. If you instead use System Settings > Passwords , you’ll have to click the + menu, choose New Password, click the Create Strong Password button, copy the password, switch back to your browser, and paste the password.

iCloud Passwords generate strong passwords elsewhere

Limitations Compared to Other Password Managers

I’ve mentioned a few ways that iCloud Passwords fails to match up to the likes of 1Password, but let’s collect all of them here so you get a sense of the difference. iCloud Passwords:

  • Generates many more verification requests.
  • Doesn’t support biometric authentication, so those verification requests can be answered only by typing in a six-digit code. (Although the code may be easier than typing in a master password.)
  • Isn’t quite as capable of autofilling login fields separated by a form or page refresh.
  • Sometimes fails to offer to save a manual login.
Supports only logins, unlike other password managers, which can store many other types of private information, such as identity cards, medical record cards, bank accounts, API credentials, secure notes, and even documents.
  • Can’t autofill credit card or address information.

You can work around this last limitation using browser features. Chromium browsers can all autofill payment methods and addresses, but by default, iCloud Passwords blocks those features from working, even though it won’t help you in that department. If you circumvent the iCloud Passwords block on browser autofill, you can get the best of both worlds. Follow these steps:

  • In your Chromium browser, navigate to the Extensions page, usually by choosing Window > Extensions . In Arc, it’s Extensions > Manage Extensions .

iCloud Passwords Chrome extension Details

Once you’ve done all that, you should be in a situation where iCloud Passwords autofills your login credentials, and your browser autofills credit card information and addresses. The browser-level interface looks a little different but works well—you simply click in a credit card or address field and then click the desired set of information from the pop-up.

Chromium browsers autofilling payment and address info

Now that I’ve written this article, I fully admit that I’m going to disable iCloud Passwords and revert to 1Password because it’s easier to use and autofills more information. Plus, my nearly 1000 logins are stored in 1Password—I’ve been using 1Password’s Quick Access pop-up to find and enter credentials in Arc logins so iCloud Passwords could remember them. In the past month, I’ve migrated 73 logins to iCloud Passwords, and although those take care of most of my day-to-day logins, I never get through a week without having to bring more over from 1Password.

But it’s clear that with the addition of the iCloud Passwords extension for Chromium browsers and some judicious browser configuration for payment methods and addresses, it’s entirely possible to rely on Apple’s free password management tools.

Subscribe today so you don’t miss any TidBITS articles!

Every week you’ll get tech tips, in-depth reviews, and insightful news analysis for discerning Apple users. For over 33 years, we’ve published professional, member-supported tech journalism that makes you smarter.

Registration confirmation will be emailed to you.

This site is protected by reCAPTCHA. The Google Privacy Policy and Terms of Service apply.

Comments About Using Apple’s iCloud Passwords Outside Safari

Notable replies.

Since I use Safari 99% of the time and have simple needs for a password manager, keychain works very well for me. I also don’t use any non-Apple platforms or Chromium browsers.

My objection to 1Password is based on two principles I try to adhere to: I really don’t like subscription apps and like even less electron based apps, which I consider to be poor Mac citizens. Even though I have 36 GB of RAM on my M3 Pro, it irks me to use a lazily created app which uses electron and, to add insult to injury, needs a subscription fee (even if it is not large).

So far, these principles have not inhibited me in any way in my choice of apps I run on my Mac.

Thank you for yet another thoughtful and informative article.

Don’t beat around the bush, tell me what you really think.

While I agree with you, I would emphasize that what makes “using + and ••• to label menus” a capital crime is to have no hint appear when one hovers over the cryptic symbol.

The Keychain app has for years supported secure notes which offers a safe haven for that kind of information. However, it is true that it unfortunately does not sync to an iOS front-end even when users have iCloud Keychain turned on. So that makes it Mac-only which limits its usefulness I guess.

Of course Notes also offers secure notes and they can hold all kinds of information (including images, PDFs, etc.) and they sync very nicely across iCloud to other devices you have connected to your Apple ID.

:+1:

For me the greatest limitation of Apple’s inbuilt password manager / keychain is that it is secured by your Mac password. This means that if you take your Mac in for repairs and the technician needs your computer password, they can access all your Keychain passwords as well. In many cases this can be prevented by setting up a separate administrator account, but most home users don’t know to do this and technicians rarely encourage it.

Join the discussion in the TidBITS Discourse forum

Participants.

Avatar for ace

BleepingComputer.com logo

Google fixes Chrome zero-days exploited at Pwn2Own 2024

Sergiu gatlan.

  • March 27, 2024

Google Chrome

Google fixed seven security vulnerabilities in the Chrome web browser on Tuesday, including two zero-days exploited during the Pwn2Own Vancouver 2024 hacking competition.

The first (tracked as CVE-2024-2887) is a high-severity type confusion weakness in the WebAssembly (Wasm) open standard. Manfred Paul demoed this vulnerability on the first day of Pwn2Own as part of a double-tap remote code execution (RCE) exploit using a crafted HTML page and targeting both Chrome and Edge.

The second zero-day is tracked as CVE-2024-2886 and was exploited by KAIST Hacking Lab's Seunghyun Lee during the second day of the CanSecWest Pwn2Own contest .

Described as a use-after-free (UAF) weakness in the WebCodecs API used by web apps to encode and decode audio and video content, it allows remote attackers to perform arbitrary reads/writes via crafted HTML pages.

Lee also used CVE-2024-2886 to gain remote code execution using a single exploit targeting both Google Chrome and Microsoft Edge.

Google fixed the two zero-days in the Google Chrome stable channel, version 123.0.6312.86/.87 for Windows and Mac and 123.0.6312.86 for Linux users, which will roll out worldwide over the coming days.

Chrome zero-days demoed at Pwn2Own

Mozilla also fixed two Firefox zero-days exploited by Manfred Paul at Pwn2Own Vancouver 2024 on the same day the bugs were demoed.

While it only took Mozille one day and Google five days to patch these vulnerabilities, vendors usually take their time to release patches for security flaws demoed at Pwn2Own since they have 90 days to push fixes until Trend Micro's Zero Day Initiative publicly discloses bug details.

In January, Google also patched an actively exploited zero-day in Chrome (CVE-2024-0519) that allowed attackers to access sensitive information or crash unpatched browsers due to an out-of-bounds memory access weakness in the Chrome V8 JavaScript engine.

The Pwn2Own 2024 Vancouver competition concluded on March 22 , with security researchers earning $1,132,500 for demonstrating 29 zero-day exploits and exploit chains over two days.

Manfred Paul emerged as this year's winner with $202,500 in cash prizes after taking down the Apple Safari, Google Chrome, and Microsoft Edge web browsers.

Related Articles:

Mozilla fixes two Firefox zero-day bugs exploited at Pwn2Own

Google: Spyware vendors behind 50% of zero-days exploited in 2023

Hackers earn $1,132,500 for 29 zero-days at Pwn2Own Vancouver

Windows 11, Tesla, and Ubuntu Linux hacked at Pwn2Own Vancouver

Microsoft again bothers Chrome users with Bing popup ads in Windows

  • Google Chrome
  • Security Update
  • Web Browser
  • Previous Article
  • Next Article

Post a Comment Community Rules

You need to login in order to post a comment.

Not a member yet? Register Now

You may also like:

A white background with tree in distance

It's surprisingly difficult for AI to create just a plain white image

Linux

DinodasRAT malware targets Linux servers in espionage campaign

Sign in with Twitter button

Help us understand the problem. What is going on with this comment?

  • Abusive or Harmful
  • Inappropriate content
  • Strong language

Read our posting guidelinese to learn what content is prohibited.

More From Forbes

Warning for mac owners as apple’s bug fix causes fresh problems.

  • Share to Facebook
  • Share to Twitter
  • Share to Linkedin

Apple's latest macOS patch appears to be causing fresh issues

A new bug fix for macOS Sonoma appears to be causing fresh problems for some Mac owners.

Apple released macOS 14.4.1 yesterday to fix a series of problems that had occurred since the recent macOS 14.4 update.

The 14.4.1 was, according to Apple, supposed to fix issues with:

  • USB hubs connected to external displays not being recognized
  • Apps including Java quitting unexpectedly
  • Copy-protected Audio Unit plug-ins for professional music apps failing to open

Although the patch does appear to have fixed those issues for some customers, others are now complaining of fresh problems.

On Reddit , Mac owners are reporting that the update has effectively bricked their Mac. “I installed 14.4.1 on my M1 Mac mini and the opening screen is all I get. No login. I've tried restarting and starting in recovery mode, to no avail.” Another Mac owner reports seeing the same problem in the Reddit thread.

Sonoma Hub Problems

Others are seeing ongoing problems with hubs, which the patch was designed to fix.

For example, one Mac owner claims that a Thunderbolt 4 dock that was working normally in macOS 14.4 stopped working once the 14.4.1 update was applied. “I swear it was working great just before the update then I update and when I try to use the keyboard/mouse to wake from sleep, it doesn't seem to work,” the Reddit user reported, although it appears the issue may have been subsequently resolved by cycling the power on the dock.

Best High-Yield Savings Accounts Of 2024

Best 5% interest savings accounts of 2024.

A user commenting on the 9to5Mac.com website also reports similar ongoing issues with their hub. “I updated to 14.4.1 and shortly thereafter got a new UGREEN USB hub. My M1 MacBook Air won’t recognize it at all. I thought 14.4 had a bug and 14.4.1 was to fix it?? Seems 14.4.1 broke it. My old cheap one still works. What gives?”

Others are discovering fresh problems that seem to have resulted from this update. “I just updated while at work and I was connected to an external monitor,” writes a MacBook Pro owner on MacRumors.com . “Now after the update it no longer recognizes the external monitor.”

Apple has been approached for comment on these fresh issues.

Sonoma Strife

Although there’s no definitive data to prove the case, the ongoing problems with Sonoma will add to the sense that this version of macOS has been one of the more bug-ridden releases in recent times.

Although any operating system update can cause compatibility issues due to the vast array of different hardware and peripheral combinations on the market, there does appear to be growing frustration with the reliability of Sonoma, which was released six months ago.

“I would expect a x.0 release to have some bugs that need ironing out, but man, having bugs of this level on a .y release is worrying in a software that powers MacBooks and other high-end devices,” writes one commenter on Reddit.

Barry Collins

  • Editorial Standards
  • Reprints & Permissions

IMAGES

  1. SAFARI BUG FIX on iOS 9.2.1-9.3

    safari bug fix

  2. 6 Safari bug fix

    safari bug fix

  3. How To Fix Safari Error "A Problem Repeatedly Occurred" When Loading a Website on Mac

    safari bug fix

  4. RID™ Tropical Strength Insect Repellent Roll-On (Safari & Travel

    safari bug fix

  5. Safari Crashing on iPhone / iPad? Here is How to Fix Safari Crashes

    safari bug fix

  6. Bug Fix crash safari et Mobile substrate 7.X

    safari bug fix

VIDEO

  1. Wild Wonders Await

  2. Nature's Entertainment: Wild Forest Squirrels & Pretty Songbirds, Cat TV Dog TV, Video for Dogs Cats

COMMENTS

  1. If Safari doesn't open a page or work as expected on your Mac

    Reload the page. From the menu bar in Safari, choose View > Reload Page. Or press Command-R. If Safari doesn't reload the page, quit Safari, then try again. If Safari doesn't quit, you can press Option-Command-Esc to force Safari to quit. If Safari automatically reopens unwanted pages, quit Safari, then press and hold the Shift key while ...

  2. Safari Not Working on Your iPhone? Here's How to Fix It

    This will reset Safari. To shut down your phone, press and hold the sleep/wake button until a slider appears. Slide to the right to power off your phone. For iPhone X and above, press and hold the side button and one of the volume buttons until the slider appears. Then slide it to the right to power off your phone.

  3. If Safari won't open a page or work as expected on your Mac

    Reload the page. From the menu bar in Safari, choose View > Reload Page. Or press Command-R. If Safari won't reload the page, close Safari, then try again. If Safari won't close, you can press Option-Command-Esc to force Safari to close. If Safari reopens unwanted pages automatically, close Safari, then press and hold the Shift key while ...

  4. How to fix Safari not working on Mac?

    Apple frequently releases Safari updates to fix the bugs that may appear. Updating your software in time can prevent many issues. So, if you started having problems with Safari, maybe you forgot to update it to a newer version. Go to the Safari menu and select About Safari. In the window that appears, you will see your current Safari version.

  5. Apple appears to have fixed the Safari bug that exposes your ...

    According to 9to5Mac, the issue has been fixed in RC (release candidate) versions of Apple's mobile and desktop operating systems, iOS 15.3 RC and macOS Monterey 12.2 RC. The bug was discovered by ...

  6. Apple Releases Safari Technology Preview 187 With Bug Fixes and

    Apple designed the ‌Safari Technology Preview‌ to test features that may be introduced into future release versions of Safari. ‌Safari Technology Preview‌ 187 includes fixes and updates ...

  7. Apple Prepares Fix for Safari Bug Allowing Websites to ...

    Apple Releases Safari Technology Preview 191 With Bug Fixes and Performance Improvements. Guides. iOS 17 Features. Our comprehensive guide highlighting every major new addition in iOS 17, plus how ...

  8. Apple's working to fix a Safari bug that opens your browsing ...

    Any fix will require that Apple rolls out updates to iOS, iPadOS, and macOS. Apple is working on fixing a bug in Safari that could allow websites to see other sites that you recently visited. However, the fix will require updates to iOS 15, iPadOS 15, and macOS Monterey to be released. The bug, shared by FingerprintJS last week, stems from the ...

  9. iOS 15.3 and macOS 12.2 out now with critical Safari bug fix for iPhone

    The updates include iOS 15.3, iPadOS 15.3 and macOS Monterey 12.2, and while they don't add any new features other than "bug fixes and security updates", they're still "recommended for all users ...

  10. Apple working on a fix for Safari bug that leaks browsing history and

    Based on a WebKit commit on GitHub, Apple engineers are already preparing a fix for the Safari bug that leaks user data. For those unfamiliar, WebKit is Apple's browser engine that powers Safari ...

  11. No, it doesn't just crash Safari. Apple has yet to fix exploitable flaw

    When the vulnerability was fixed almost three weeks ago by open source developers outside of Apple, the fix's release notes said that the bug caused Safari to crash. A researcher from security ...

  12. These are the Safari bugs that have been fixed in the latest ...

    In Safari Technology Preview release 170, you'll find bug fixes and performance improvements for CSS, Forms, Layout, JavaScript, Media, Popover, and Accessibility. The Safari Technology Preview is a way for Apple to gather feedback on features before implementing them into release versions of Safari.

  13. Why is my Mac Safari not working (and how to fix it)?

    If your Wi-Fi isn't functioning correctly, enabling cellular data could fix your issue. To do this, go to Settings > Cellular > Safari and toggle it on. Alternatively, try turning off Wi-Fi and connect using cellular data only. If this works, it indicates a network issue with your Wi-Fi.

  14. Critical Mac update fixes Safari bug that leaks user data

    The good news is a fix is fast on its way. Here's what you need to know. A critical bug has been discovered in Safari that could leak user personal data. The good news is a fix is fast on its way.

  15. macOS bugs causing sporadic browsing issues with Safari, Firefox

    An apparent bug — or series of bugs — in macOS 11.3 and 11.3.1 is causing seemingly random website browsing problems in Apple's Safari 14.1, as well as on other browsers.

  16. Apple is in the works to fix a serious Safari bug that allows access to

    However, Safari 15's bug violates a policy that would ensure the correct functioning of the API. The researchers that discovered it claim that whenever a website interacts with the database of the API, a new empty database using the same name is created in all other active frames, tabs, and windows within the same browser session.

  17. Fix Common Safari Problems for Top Performance

    3. Disable search suggestions. A quick but reliable remedy for speeding up your Safari is turning off search suggestions. To do so, go to Safari > Preferences > Search and uncheck the box for "Include search engine suggestions.". Now your browser just got a little faster. 4. Check all extensions.

  18. Safari bug is leaking users' browsing history

    Safari has a bug that could leak your web browsing history to an attacker. Apple is working on a fix for it. ... Apple has released an iOS 15 RC 3 update to fix the WebKit bug leaking your ...

  19. Apple Releases Safari Technology Preview 191 With Bug Fixes and

    Thursday March 28, 2024 7:26 pm PDT by Juli Clover. Apple today released a new update for Safari Technology Preview, the experimental browser Apple first introduced in March 2016. Apple designed ...

  20. Safari 17.3.1 Update for MacOS Ventura & Monterey Fixes Overlapping

    When users experience this bug, it can look like text is either disappearing (even when typing), or the text can be overlapping other text, and the bug can make the user experience difficult. If you're continuing to run MacOS Ventura or MacOS Monterey on a Mac, this is a recommended bug fix update. Downloading Safari 17.3.1 Update

  21. macos

    laptop screen bug, need to fix it Hot Network Questions For the last day my M1 MBA always has a battery warning icon ⚠️, only on the lockscreen

  22. Reporting Bugs

    5. Next Steps. Once your bug is filed, you'll receive email when it's updated at each stage in the bug life cycle. After the bug is considered fixed, you may be asked to download the latest WebKit Build Archiveand confirm that the fix works for you. Note:Safari is not WebKit. Safari bugs should be reported to Apple. @[email protected].

  23. Apple Security Bug Opens iPhone, iPad to RCE

    The three bugs include CVE-2024-23222, a remote code execution bug in the WebKit browser engine for Safari, and CVE-2024-23225 and CVE-2024-23296, two kernel vulnerabilities in iOS that attackers ...

  24. Vulnerability Recap 4/1/24: Cisco, Fortinet & Microsoft

    The fix: Apply the emergency ... Safari: Version 17.4.1 for macOS Monterey and macOS Ventura; ... The token validation process bug in Splunk Enterprise, CVE-2024-29945, rated 7.2 and could allow ...

  25. Using Apple's iCloud Passwords Outside Safari

    In Arc, it's Extensions > Manage Extensions. Click the Details button next to iCloud Passwords. On the iCloud Password Details screen, click the button next to Extension Options, and in the dialog that opens, deselect Turn Off Chrome AutoFill. That double-negative allows Chrome's AutoFill to operate independently again.

  26. Google fixes Chrome zero-days exploited at Pwn2Own 2024

    02:44 PM. 0. Google fixed seven security vulnerabilities in the Chrome web browser on Tuesday, including two zero-days exploited during the Pwn2Own Vancouver 2024 hacking competition. The first ...

  27. Warning For Mac Owners As Apple's Bug Fix Causes Fresh Problems

    Apple's latest macOS patch appears to be causing fresh issues. getty. A new bug fix for macOS Sonoma appears to be causing fresh problems for some Mac owners. Apple released macOS 14.4.1 yesterday ...