Halle Winkler

**Name of the Vulnerable Software and Affected Versions** visionOS versions prior to 2.4 macOS Ventura versions prior to 13.7.5 tvOS versions prior to 18.4 iOS versions prior to 18.4 iPadOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 macOS Sonoma versions prior to 14.7.5 **Description** A malicious app may be able to dismiss the system notification on the Lock Screen that a recording was started. This issue was addressed with improved access restrictions. **Recommendations** For visionOS versions prior to 2.4, update to visionOS 2.4. For macOS Ventura versions prior to 13.7.5, update to macOS Ventura 13.7.5. For tvOS versions prior to 18.4, update to tvOS 18.4. For iOS versions prior to 18.4, update to iOS 18.4. For iPadOS versions prior to 18.4, update to iPadOS 18.4. For macOS Sequoia versions prior to 15.4, update to macOS Sequoia 15.4. For macOS Sonoma versions prior to 14.7.5, update to macOS Sonoma 14.7.5.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 13.7.2 macOS versions prior to 14.7.2 macOS versions prior to 15.2 **Description** The issue is related to errors in state management of the Keyboard Event Handler component in MacOS operating systems. Exploitation of this issue may allow a remote attacker to access confidential information. An app may be able to capture keyboard events from the lock screen. **Recommendations** For versions prior to 13.7.2, update to macOS Ventura 13.7.2 or later. For versions prior to 14.7.2, update to macOS Sonoma 14.7.2 or later. For versions prior to 15.2, update to macOS Sequoia 15.2 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 13.7.2 macOS versions prior to 14.7.2 **Description** This issue was addressed through improved state management. A user with screen sharing access may be able to view another user's screen. **Recommendations** For macOS versions prior to 13.7.2, update to macOS Ventura 13.7.2 to resolve the issue. For macOS versions prior to 14.7.2, update to macOS Sonoma 14.7.2 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 13.7.1 macOS versions prior to 14.7.1 macOS versions prior to 15 **Description** The issue allows an attacker with physical access to share items from the lock screen. This is possible due to inadequate checks that have been improved in the fixed versions. **Recommendations** For macOS versions prior to 13.7.1, update to macOS Ventura 13.7.1. For macOS versions prior to 14.7.1, update to macOS Sonoma 14.7.1. For macOS versions prior to 15, update to macOS Sequoia 15.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 15 **Description** A permissions issue was addressed with additional restrictions. This issue allows a camera extension to potentially access the internet. **Recommendations** For versions prior to 15, update to macOS Sequoia 15 to resolve the issue. As a temporary workaround, consider restricting camera extension permissions to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 14 **Description** A logic issue was addressed with improved checks. This issue allows a camera extension to access the camera view from apps other than the app for which it was granted permission. The issue is related to insufficient access control in the CoreMedia component of the macOS operating system, which may allow an attacker to gain unauthorized access to the camera. **Recommendations** For versions prior to 14, update to macOS Sonoma 14 to resolve the issue. As a temporary workaround, consider restricting access to camera extensions to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 13 **Description** The issue concerns an app's access to camera data. A camera extension may be able to continue receiving video after the app that activated it was closed. This is due to a problem with the logic controlling app access to camera data. **Recommendations** For versions prior to 13, update to macOS Ventura 13 to resolve the issue.