High · published November 4, 2025
⚡ A sneaky logic flaw in Apple’s Private Relay could let remote attackers peek at your DNS queries! 🔍 Think of it like a hidden camera in a restaurant that can snoop on your menu choices — if you're not careful, someone could find out what you really ordered. This vulnerability is all about who’s eavesdropping on your digital conversations when you think you’re safe! An attacker with this exploit could gain insight into your browsing habits by seeing your DNS queries, potentially exposing sensitive information and compromising your privacy. This is particularly concerning for those who rely on Private Relay for enhanced online anonymity. Protecting your data is absolutely crucial!
Think of it like a hidden camera in a restaurant that can snoop on your menu choices — if you're not careful, someone could find out what you really ordered. This vulnerability is all about who’s eavesdropping on your digital conversations when you think you’re safe! This logic issue in Safari and other Apple platforms affects state management, allowing remote attackers to view DNS queries even when Private Relay is active, which is intended to mask such information.
An attacker with this exploit could gain insight into your browsing habits by seeing your DNS queries, potentially exposing sensitive information and compromising your privacy. This is particularly concerning for those who rely on Private Relay for enhanced online anonymity. Protecting your data is absolutely crucial! Update your Apple devices to the latest versions: Safari 26, iOS 18.7.7 and iPadOS 18.7.7, macOS Tahoe 26, and others as applicable. Regularly check for updates to ensure you have the latest security patches! You’ve got this! Update your devices, and you’ll be a security hero in no time! 🦸♂️
| Product | Versions | Fixed in |
|---|---|---|
| apple/safari | < 26.0 | 26.0 |
| apple/ipados | < 26.0 | 26.0 |
| apple/iphone_os | < 26.0 | 26.0 |
| apple/visionos | < 26.0 | 26.0 |
| apple/watchos | < 26.0 | 26.0 |