Chi Yuan Chang

**Name of the Vulnerable Software and Affected Versions** watchOS versions prior to 11.6 iOS versions prior to 18.6 iPadOS versions prior to 18.6 and 17.7.9 tvOS versions prior to 18.6 macOS Sequoia versions prior to 15.6 visionOS versions prior to 2.6 **Description** An application may be able to access user-sensitive data due to insufficient permissions checks. **Recommendations** Update watchOS to version 11.6 or later. Update iOS to version 18.6 or later. Update iPadOS to version 18.6 or later, or to version 17.7.9. Update tvOS to version 18.6 or later. Update macOS Sequoia to version 15.6 or later. Update visionOS to version 2.6 or later.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 18.4 iPadOS versions prior to 18.4 **Description** An issue allows an attacker to potentially use Siri to enable Auto-Answer Calls. This could be exploited on a locked device. The estimated number of potentially affected devices is not specified. **Recommendations** For iOS versions prior to 18.4, update to iOS 18.4 to resolve the issue. For iPadOS versions prior to 18.4, update to iPadOS 18.4 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS Ventura versions prior to 13.7.2 iOS versions prior to 18.2 iPadOS versions prior to 18.2 iPadOS versions prior to 17.7.3 macOS Sonoma versions prior to 14.7.2 macOS Sequoia versions prior to 15.2 **Description** A logic issue was addressed with improved file handling. Photos in the Hidden Photos Album may be viewed without authentication. The issue is related to insufficient authentication procedures, which could allow a remote attacker to gain unauthorized access to protected information. **Recommendations** For macOS Ventura versions prior to 13.7.2, update to macOS Ventura 13.7.2 to resolve the issue. For iOS versions prior to 18.2, update to iOS 18.2 to resolve the issue. For iPadOS versions prior to 18.2, update to iPadOS 18.2 to resolve the issue. For iPadOS versions prior to 17.7.3, update to iPadOS 17.7.3 to resolve the issue. For macOS Sonoma versions prior to 14.7.2, update to macOS Sonoma 14.7.2 to resolve the issue. For macOS Sequoia versions prior to 15.2, update to macOS Sequoia 15.2 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 18 iPadOS versions prior to 18 **Description** An issue allowed an attacker to potentially use Siri to enable Auto-Answer Calls. This could be exploited on a locked device. **Recommendations** For iOS versions prior to 18, update to iOS 18 to resolve the issue. For iPadOS versions prior to 18, update to iPadOS 18 to resolve the issue.