Abhinav Bansal

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 10.14 Description: A configuration issue was addressed with additional restrictions. Recommendations: For versions prior to 10.14, update to macOS Mojave 10.14 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 11 macOS versions prior to 10.13 tvOS versions prior to 11 watchOS versions prior to 4 **Description** The issue involves the CFNetwork Proxies component and allows remote attackers to cause a denial of service. **Recommendations** For iOS versions prior to 11, update to version 11 or later. For macOS versions prior to 10.13, update to version 10.13 or later. For tvOS versions prior to 11, update to version 11 or later. For watchOS versions prior to 4, update to version 4 or later.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 10.3 **Description** The issue is related to the SafariViewController component in the iOS operating system and is caused by a lack of protection for service data. This can be exploited by a remote attacker to obtain confidential information by leveraging incorrect synchronization of Safari cache clearing. **Recommendations** For iOS versions prior to 10.3, update to a version 10.3 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apple OS X versions prior to 10.11.6 **Description** The issue concerns weak permissions for web-browser cookies in CFNetwork, allowing local users to obtain sensitive information. **Recommendations** For Apple OS X versions prior to 10.11.6, update to version 10.11.6 or later to resolve the issue.