All fingerprinting is a vulnerability, unless the client opts-in.
The opt in checkbox is labeled "Enable Javascript"
The opt in checkbox is labeled "Enable Javascript"