International Journal of Electrical and Computer Engineering
Vol 15, No 6: December 2025

Exploring cookies vulnerabilities: awareness, privacy risks and exploitation

Hamzah, Nor Anisah Amir (Unknown)
Adnan, Anis Safiyyah (Unknown)
Salleh, Norsaremah (Unknown)



Article Info

Publish Date
01 Dec 2025

Abstract

This study investigates cookie vulnerabilities, focusing on awareness, privacy risks, and exploitation techniques. We used a mixed-method approach that combines insights from a survey study and a systematic mapping study of 27 papers from online databases to comprehensively address the research topic. The results show a moderate level of user awareness about cookie-related privacy risks, with significant concerns over user tracking and profiling, identified in 88% of the reviewed studies. Key risks include sensitive data exposure, privacy and consent issues, targeted advertising, ineffective mitigation measures, and cyberattacks. Tracking via cookies, and especially third-party cookies were found to pose the greatest risk to end-users. Their widespread use for cross-site tracking and extensive fingerprinting often occurred without users’ awareness or explicit consent. These insights suggest the need for stricter privacy laws, better practices on cookies, and improved user awareness to mitigate concerning risks.

Copyrights © 2025






Journal Info

Abbrev

IJECE

Publisher

Subject

Computer Science & IT Electrical & Electronics Engineering

Description

International Journal of Electrical and Computer Engineering (IJECE, ISSN: 2088-8708, a SCOPUS indexed Journal, SNIP: 1.001; SJR: 0.296; CiteScore: 0.99; SJR & CiteScore Q2 on both of the Electrical & Electronics Engineering, and Computer Science) is the official publication of the Institute of ...