The issue was addressed with improved checks. This issue is fixed in watchOS 11.5, tvOS 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. A malicious website may exfiltrate data cross-origin.
https://support.apple.com/en-us/122722
https://support.apple.com/en-us/122721
https://support.apple.com/en-us/122720
https://support.apple.com/en-us/122719