Guilherme Rambo

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to Tahoe 26 iOS versions prior to 26 iPadOS versions prior to 26 **Description** An application may be able to fingerprint a user due to improved redaction of sensitive information. **Recommendations** Update macOS to version Tahoe 26. Update iOS to version 26. Update iPadOS to version 26.

**Name of the Vulnerable Software and Affected Versions** watchOS versions prior to 11.5 tvOS versions prior to 18.5 iOS versions prior to 18.5 iPadOS versions prior to 18.5 macOS Sequoia versions prior to 15.5 visionOS versions prior to 2.5 **Description** The issue allows an app to access sensitive user data. This was addressed through improved state management. **Recommendations** For watchOS versions prior to 11.5, update to watchOS 11.5. For tvOS versions prior to 18.5, update to tvOS 18.5. For iOS versions prior to 18.5, update to iOS 18.5. For iPadOS versions prior to 18.5, update to iPadOS 18.5. For macOS Sequoia versions prior to 15.5, update to macOS Sequoia 15.5. For visionOS versions prior to 2.5, update to visionOS 2.5.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 18.3 iPadOS versions prior to 18.3 iPadOS versions prior to 17.7.3 **Description** An app could impersonate system notifications, and sensitive notifications now require restricted entitlements. This issue could allow an app to cause a denial-of-service. The vulnerability exploits the Darwin notification system’s lack of sender verification. **Recommendations** For iOS versions prior to 18.3, update to iOS 18.3 or later to resolve the issue. For iPadOS versions prior to 18.3, update to iPadOS 18.3 or later to resolve the issue. For iPadOS versions prior to 17.7.3, update to iPadOS 17.7.3 or later to resolve the issue. As a temporary workaround, consider restricting app and widget installs via Mobile Device Manager until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Xcode versions prior to 16 **Description** A privacy issue was addressed by removing sensitive data. An attacker may be able to determine the Apple ID of the owner of the computer. **Recommendations** For versions prior to 16, update to Xcode 16 to resolve the issue. As a temporary workaround, consider restricting access to sensitive data until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 17.4 Apple iPadOS versions prior to 17.4 Apple tvOS versions prior to 17.4 Apple macOS Sonoma versions prior to 14.4 Apple watchOS versions prior to 10.4 **Description** An access issue was addressed with improved access restrictions, which may allow an app to access Bluetooth-connected microphones without user permission. **Recommendations** For Apple iOS versions prior to 17.4, update to iOS 17.4 or later. For Apple iPadOS versions prior to 17.4, update to iPadOS 17.4 or later. For Apple tvOS versions prior to 17.4, update to tvOS 17.4 or later. For Apple macOS Sonoma versions prior to 14.4, update to macOS Sonoma 14.4 or later. For Apple watchOS versions prior to 10.4, update to watchOS 10.4 or later.

**Name of the Vulnerable Software and Affected Versions** visionOS versions prior to 1.1 iOS versions prior to 17.4 iOS versions prior to 16.7.6 iPadOS versions prior to 17.4 iPadOS versions prior to 16.7.6 **Description** An app may be able to spoof system notifications and UI. This issue was addressed with additional entitlement checks. **Recommendations** For visionOS versions prior to 1.1, update to visionOS 1.1 to resolve the issue. For iOS versions prior to 17.4, update to iOS 17.4 to resolve the issue. For iOS versions prior to 16.7.6, update to iOS 16.7.6 to resolve the issue. For iPadOS versions prior to 17.4, update to iPadOS 17.4 to resolve the issue. For iPadOS versions prior to 16.7.6, update to iPadOS 16.7.6 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 13.3 macOS Monterey versions prior to 12.6.4 macOS Big Sur versions prior to 11.7.5 **Description** A permissions issue was addressed with improved validation, which may allow an app to read sensitive location information. **Recommendations** For macOS versions prior to 13.3, update to macOS Ventura 13.3. For macOS Monterey versions prior to 12.6.4, update to macOS Monterey 12.6.4. For macOS Big Sur versions prior to 11.7.5, update to macOS Big Sur 11.7.5.

**Name of the Vulnerable Software and Affected Versions** macOS Ventura versions prior to 13.2 **Description** A permissions issue was addressed with improved validation, which may have allowed an app to access a user's Safari history. **Recommendations** For macOS Ventura versions prior to 13.2, update to macOS Ventura 13.2 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 13.2 **Description** A permissions issue was addressed with improved validation, which may have allowed an app to access user-sensitive data. **Recommendations** For versions prior to 13.2, update to macOS Ventura 13.2 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 16 watchOS versions prior to 9 **Description** The issue allows an app to potentially read a persistent device identifier. This was addressed with improved entitlements. **Recommendations** For iOS versions prior to 16, update to iOS 16 to resolve the issue. For watchOS versions prior to 9, update to watchOS 9 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 16.1 iPadOS versions prior to 16.1 **Description** The issue allowed apps with Bluetooth access to record audio using connected AirPods, potentially capturing conversations with Siri and background sound. This was possible due to a problem with Core Bluetooth and the DoAP service, which supports Siri and Dictation on AirPods. The issue did not require the app to request microphone access permission and would not leave any traces of microphone eavesdropping. The vulnerability could be exploited to bypass the Transparency, Consent and Control (TCC) security system in macOS, allowing any app to record Siri conversations without requesting permissions. **Recommendations** For iOS versions prior to 16.1, update to iOS 16.1 or later to resolve the issue. For iPadOS versions prior to 16.1, update to iPadOS 16.1 or later to resolve the issue. As a temporary workaround, consider disabling Bluetooth access for apps that do not require it to minimize the risk of exploitation. Restrict access to the DoAP service to prevent unauthorized audio recording.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 13 **Description** An access issue was addressed with additional sandbox restrictions on third-party apps. This issue allows an app to potentially record audio with paired AirPods. **Recommendations** For versions prior to 13, update to macOS Ventura 13 to resolve the issue. As a temporary workaround, consider restricting access to audio recording features for third-party apps until the update is applied.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.3 **Description** The issue allows an app to potentially spoof system notifications and UI. This was addressed with a new entitlement. **Recommendations** For versions prior to 12.3, update to macOS Monterey 12.3 to resolve the issue.