The vulnerability allowed tracking across sites, even in Private Mode.