5Aelo

**Nome do software vulnerável e versões afetadas** Versões do Apple iOS anteriores à 11.2 Versões do Apple macOS anteriores à 10.13.2 Versões do Apple tvOS anteriores à 11.2 Versões do Apple watchOS anteriores à 4.2 **Descrição** Uma condição de corrida foi corrigida com validação adicional. Esse problema permite que um aplicativo possa obter privilégios elevados. **Recomendações** Para versões do Apple iOS anteriores à 11.2, atualize para o iOS 11.2 ou posterior. Para versões do Apple macOS anteriores à 10.13.2, aplique a Atualização de Segurança 2017-002 Sierra ou posterior, ou atualize para o macOS High Sierra 10.13.2 ou posterior. Para versões do Apple tvOS anteriores à 11.2, atualize para o tvOS 11.2 ou posterior. Para versões do Apple watchOS anteriores à 4.2, atualize para o watchOS 4.2 ou posterior. Para o macOS El Capitan, aplique a Atualização de Segurança 2017-005 El Capitan ou posterior.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 12 tvOS versions prior to 12 watchOS versions prior to 5 Safari versions prior to 12 iTunes for Windows versions prior to 12.9 iCloud for Windows versions prior to 7.7 **Description** Multiple memory corruption issues were addressed with improved memory handling. The issue is related to memory corruption problems. **Recommendations** For iOS versions prior to 12, update to version 12 or later. For tvOS versions prior to 12, update to version 12 or later. For watchOS versions prior to 5, update to version 5 or later. For Safari versions prior to 12, update to version 12 or later. For iTunes for Windows versions prior to 12.9, update to version 12.9 or later. For iCloud for Windows versions prior to 7.7, update to version 7.7 or later.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 12 tvOS versions prior to 12 watchOS versions prior to 5 Safari versions prior to 12 iTunes for Windows versions prior to 12.9 iCloud for Windows versions prior to 7.7 **Description** The issue is related to multiple memory corruption problems that were addressed with improved memory handling. **Recommendations** For iOS versions prior to 12, update to version 12 or later. For tvOS versions prior to 12, update to version 12 or later. For watchOS versions prior to 5, update to version 5 or later. For Safari versions prior to 12, update to version 12 or later. For iTunes for Windows versions prior to 12.9, update to version 12.9 or later. For iCloud for Windows versions prior to 7.7, update to version 7.7 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 10.13.4 **Description** The issue involves the `ATS` component and allows attackers to obtain sensitive information by leveraging symlink mishandling. **Recommendations** For macOS versions prior to 10.13.4, update to version 10.13.4 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 11.3 macOS versions prior to 10.13.4 **Description** The issue involves the `Storage` component and is related to a race condition. This condition allows attackers to execute arbitrary code in a privileged context via a crafted app. **Recommendations** For iOS versions prior to 11.3, update to version 11.3 or later. For macOS versions prior to 10.13.4, update to version 10.13.4 or later.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 11.3 macOS versions prior to 10.13.4 watchOS versions prior to 4.3 **Description** The issue involves the CoreFoundation component and is related to a race condition. This condition allows attackers to execute arbitrary code in a privileged context via a crafted app. **Recommendations** For iOS versions prior to 11.3, update to version 11.3 or later. For macOS versions prior to 10.13.4, update to version 10.13.4 or later. For watchOS versions prior to 4.3, update to version 4.3 or later.