Denis Tokarev

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 18 iPadOS versions prior to 18 macOS Sequoia versions prior to 15 **Description** This issue was addressed with improved validation of symlinks, allowing unauthorized apps to access sensitive user data, including Health information, microphone, and iCloud backups, without user consent or knowledge. The vulnerability affects the Transparency, Consent, and Control (TCC) subsystem, which is designed to protect sensitive data. **Recommendations** Update to iOS 18 to fix the issue. Update to iPadOS 18 to fix the issue. Update to macOS Sequoia 15 to fix the issue.

**Name of the Vulnerable Software and Affected Versions** macOS Ventura versions prior to 13.7 iOS versions prior to 17.7 iPadOS versions prior to 17.7 visionOS versions prior to 2 watchOS versions prior to 11 macOS Sequoia versions prior to 15 iOS versions prior to 18 iPadOS versions prior to 18 macOS Sonoma versions prior to 14.7 tvOS versions prior to 18 **Description** A file access issue was addressed with improved input validation. This issue may allow an app to access user-sensitive data. **Recommendations** For macOS Ventura versions prior to 13.7, update to macOS Ventura 13.7. For iOS versions prior to 17.7, update to iOS 17.7. For iPadOS versions prior to 17.7, update to iPadOS 17.7. For visionOS versions prior to 2, update to visionOS 2. For watchOS versions prior to 11, update to watchOS 11. For macOS Sequoia versions prior to 15, update to macOS Sequoia 15. For iOS versions prior to 18, update to iOS 18. For iPadOS versions prior to 18, update to iPadOS 18. For macOS Sonoma versions prior to 14.7, update to macOS Sonoma 14.7. For tvOS versions prior to 18, update to tvOS 18.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 15.0.2 iPadOS versions prior to 15.0.2 tvOS versions prior to 15.1 watchOS versions prior to 8.1 macOS Monterey versions prior to 12.0.1 **Description** A logic issue was addressed with improved restrictions, which may have allowed a malicious application to read a user's gameplay data. **Recommendations** For iOS versions prior to 15.0.2, update to iOS 15.0.2 or later. For iPadOS versions prior to 15.0.2, update to iPadOS 15.0.2 or later. For tvOS versions prior to 15.1, update to tvOS 15.1 or later. For watchOS versions prior to 8.1, update to watchOS 8.1 or later. For macOS Monterey versions prior to 12.0.1, update to macOS Monterey 12.0.1 or later.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 15.2 iPadOS versions prior to 15.2 watchOS versions prior to 8.3 macOS Monterey versions prior to 12.1 tvOS versions prior to 15.2 **Description** A permissions issue was addressed with improved validation, which may allow a malicious application to read sensitive contact information. **Recommendations** For iOS versions prior to 15.2, update to iOS 15.2 or later. For iPadOS versions prior to 15.2, update to iPadOS 15.2 or later. For watchOS versions prior to 8.3, update to watchOS 8.3 or later. For macOS Monterey versions prior to 12.1, update to macOS Monterey 12.1 or later. For tvOS versions prior to 15.2, update to tvOS 15.2 or later.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 15.2 iPadOS versions prior to 15.2 **Description** A permissions issue was addressed with improved validation, allowing a malicious application to potentially identify what other applications a user has installed. **Recommendations** For iOS versions prior to 15.2, update to iOS 15.2 or later to resolve the issue. For iPadOS versions prior to 15.2, update to iPadOS 15.2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 15.0.2 iPadOS versions prior to 15.0.2 tvOS versions prior to 15.1 watchOS versions prior to 8.1 macOS Monterey versions prior to 12.0.1 **Description** A logic issue was addressed with improved restrictions, which may have allowed a malicious application to access information about a user's contacts. **Recommendations** For iOS versions prior to 15.0.2, update to iOS 15.0.2 or later. For iPadOS versions prior to 15.0.2, update to iPadOS 15.0.2 or later. For tvOS versions prior to 15.1, update to tvOS 15.1 or later. For watchOS versions prior to 8.1, update to watchOS 8.1 or later. For macOS Monterey versions prior to 12.0.1, update to macOS Monterey 12.0.1 or later.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 14.7 watchOS versions prior to 7.6 macOS Big Sur versions prior to 11.5 **Description** A local attacker may be able to access analytics data due to a logic issue. The issue was addressed with improved restrictions. **Recommendations** For iOS versions prior to 14.7, update to iOS 14.7 to resolve the issue. For watchOS versions prior to 7.6, update to watchOS 7.6 to resolve the issue. For macOS Big Sur versions prior to 11.5, update to macOS Big Sur 11.5 to resolve the issue.