The vulnerability could allow an attacker to cause a victim to run malicious scripts when visiting various Web sites, resulting in information disclosure.

用户浏览诸多网站时，该漏洞可导致允许来袭者运行恶意脚本，进而导致信息泄露。

youdao

We are fixing the vulnerability that led to the disclosure of this data, changing the passwords of the affected Yahoo!

ENGADGET: Yahoo confirms server breach, over 400k accounts compromised

It is typically legal for someone to disclose a vulnerability, even when the disclosure could serve as a roadmap for criminals looking to exploit the flaw, said Ms. Granick.

WSJ: Computer Experts Face Backlash

Apple has been notified of the vulnerability and a proposed fix with full public disclosure coming at the BlackHat conference on August 2nd.

ENGADGET: Safari exploit gives hackers full control over iPhones and possibly PCs and Macs