Ian Beer

**Name of the Vulnerable Software and Affected Versions** tvOS versions prior to 16.2 macOS Monterey versions prior to 12.6.2 macOS Ventura versions prior to 13.1 macOS Big Sur versions prior to 11.7.2 iOS versions prior to 15.7.2 and prior to 16.2 iPadOS versions prior to 15.7.2 and prior to 16.2 watchOS versions prior to 9.2 macOS versions prior to 13.0.1 (affected versions not specified for this particular issue) **Description** A race condition was addressed with additional validation. This issue may allow an app to execute arbitrary code with kernel privileges. **Recommendations** For tvOS versions prior to 16.2, update to tvOS 16.2. For macOS Monterey versions prior to 12.6.2, update to macOS Monterey 12.6.2. For macOS Ventura versions prior to 13.1, update to macOS Ventura 13.1. For macOS Big Sur versions prior to 11.7.2, update to macOS Big Sur 11.7.2. For iOS versions prior to 15.7.2, update to iOS 15.7.2 or later. For iOS versions prior to 16.2, update to iOS 16.2. For iPadOS versions prior to 15.7.2, update to iPadOS 15.7.2 or later. For iPadOS versions prior to 16.2, update to iPadOS 16.2. For watchOS versions prior to 9.2, update to watchOS 9.2. For macOS versions prior to 13.0.1, update to a version that includes the fix for this issue, such as macOS Ventura 13.1 or later.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 15.7.1 and 16.1 Apple iPadOS versions prior to 15.7.1 and 16 Apple tvOS versions prior to 16.1 Apple watchOS versions prior to 9.1 Apple macOS versions prior to 12.6.1 and 13 **Description** A logic issue was addressed with improved checks, allowing an app to potentially execute arbitrary code with kernel privileges. **Recommendations** For Apple iOS versions prior to 15.7.1, update to iOS 15.7.1 or later. For Apple iOS versions prior to 16.1, update to iOS 16.1 or later. For Apple iPadOS versions prior to 15.7.1, update to iPadOS 15.7.1 or later. For Apple iPadOS versions prior to 16, update to iPadOS 16 or later. For Apple tvOS versions prior to 16.1, update to tvOS 16.1 or later. For Apple watchOS versions prior to 9.1, update to watchOS 9.1 or later. For Apple macOS versions prior to 12.6.1, update to macOS 12.6.1 or later. For Apple macOS versions prior to 13, update to macOS 13 or later.

**Name of the Vulnerable Software and Affected Versions** Apple tvOS versions prior to 16.1 Apple macOS Big Sur versions prior to 11.7 Apple macOS Ventura versions prior to 13 Apple watchOS versions prior to 9.1 Apple iOS versions prior to 16.1 Apple iPadOS versions prior to 16 Apple macOS Monterey versions prior to 12.6 **Description** The issue allows an app to potentially execute arbitrary code with kernel privileges due to a problem that was addressed with improved memory handling. **Recommendations** For Apple tvOS versions prior to 16.1, update to tvOS 16.1 or later. For Apple macOS Big Sur versions prior to 11.7, update to macOS Big Sur 11.7 or later. For Apple macOS Ventura versions prior to 13, update to macOS Ventura 13 or later. For Apple watchOS versions prior to 9.1, update to watchOS 9.1 or later. For Apple iOS versions prior to 16.1, update to iOS 16.1 or later. For Apple iPadOS versions prior to 16, update to iPadOS 16 or later. For Apple macOS Monterey versions prior to 12.6, update to macOS Monterey 12.6 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 11.6.2 tvOS versions prior to 15.2 macOS Monterey versions prior to 12.1 macOS Catalina versions prior to Security Update 2021-008 iOS versions prior to 15.2 iPadOS versions prior to 15.2 watchOS versions prior to 8.3 **Description** A memory corruption issue was addressed with improved state management. This issue may allow a malicious application to execute arbitrary code with kernel privileges. **Recommendations** For macOS versions prior to 11.6.2, update to macOS Big Sur 11.6.2 or later. For tvOS versions prior to 15.2, update to tvOS 15.2 or later. For macOS Monterey versions prior to 12.1, update to macOS Monterey 12.1 or later. For macOS Catalina versions prior to Security Update 2021-008, apply Security Update 2021-008 or later. For iOS versions prior to 15.2, update to iOS 15.2 or later. For iPadOS versions prior to 15.2, update to iPadOS 15.2 or later. For watchOS versions prior to 8.3, update to watchOS 8.3 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 11.4 tvOS versions prior to 14.6 watchOS versions prior to 7.5 iOS versions prior to 14.6 iPadOS versions prior to 14.6 **Description** The issue is related to a buffer overflow in the kernel of the operating systems, which can allow an attacker to elevate their privileges. This can potentially enable an application to execute arbitrary code with kernel privileges. **Recommendations** For macOS versions prior to 11.4, update to macOS Big Sur 11.4 to resolve the issue. For tvOS versions prior to 14.6, update to tvOS 14.6 to resolve the issue. For watchOS versions prior to 7.5, update to watchOS 7.5 to resolve the issue. For iOS versions prior to 14.6, update to iOS 14.6 to resolve the issue. For iPadOS versions prior to 14.6, update to iPadOS 14.6 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 14.6 Apple iPadOS versions prior to 14.6 Apple macOS versions prior to 11.4 Apple tvOS versions prior to 14.6 Apple watchOS versions prior to 7.5 macOS Catalina versions prior to Security Update 2021-003 **Description** A logic issue was addressed with improved state management. This issue may lead to a denial of service when processing a maliciously crafted message. The vulnerability is caused by a logic error during the authentication procedure, which can be exploited by a remote attacker to cause a denial of service. **Recommendations** For iOS versions prior to 14.6, update to iOS 14.6 or later. For iPadOS versions prior to 14.6, update to iPadOS 14.6 or later. For macOS Big Sur versions prior to 11.4, update to macOS Big Sur 11.4 or later. For macOS Catalina versions prior to Security Update 2021-003, apply Security Update 2021-003 or later. For tvOS versions prior to 14.6, update to tvOS 14.6 or later. For watchOS versions prior to 7.5, update to watchOS 7.5 or later.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 12.5.5 and prior to 14.4 Apple iPadOS versions prior to 14.4 Apple macOS versions prior to 11.2 Apple macOS Catalina versions prior to Security Update 2021-001 Apple macOS Mojave versions prior to Security Update 2021-001 **Description** A type confusion issue in the XNU kernel of Apple iOS and macOS allows a malicious application to execute arbitrary code with kernel privileges. This issue is reportedly being exploited in the wild, with threat actors using it to deliver malware to users in Hong Kong. The vulnerability can be exploited by running a specially crafted application, allowing an attacker to gain elevated privileges or execute arbitrary code. **Recommendations** For Apple iOS versions prior to 12.5.5 and prior to 14.4, update to iOS 12.5.5 or later, or iOS 14.4 or later. For Apple iPadOS versions prior to 14.4, update to iPadOS 14.4 or later. For Apple macOS versions prior to 11.2, update to macOS Big Sur 11.2 or later. For Apple macOS Catalina versions prior to Security Update 2021-001, apply Security Update 2021-001 or later. For Apple macOS Mojave versions prior to Security Update 2021-001, apply Security Update 2021-001 or later.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 13.3 iPadOS versions prior to 13.3 watchOS versions prior to 6.1.1 macOS Catalina versions prior to 10.15.2 macOS Mojave versions prior to Security Update 2019-002 macOS High Sierra versions prior to Security Update 2019-007 tvOS versions prior to 13.3 **Description** A memory corruption issue allows an application to potentially execute arbitrary code with kernel privileges. The issue was addressed by removing the vulnerable code. **Recommendations** For iOS versions prior to 13.3, update to iOS 13.3 or later. For iPadOS versions prior to 13.3, update to iPadOS 13.3 or later. For watchOS versions prior to 6.1.1, update to watchOS 6.1.1 or later. For macOS Catalina versions prior to 10.15.2, update to macOS Catalina 10.15.2 or later. For macOS Mojave versions prior to Security Update 2019-002, apply Security Update 2019-002 or later. For macOS High Sierra versions prior to Security Update 2019-007, apply Security Update 2019-007 or later. For tvOS versions prior to 13.3, update to tvOS 13.3 or later.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 13.3 iPadOS versions prior to 13.3 **Description** An information disclosure issue was addressed by removing the vulnerable code. This issue allows an application to potentially execute arbitrary code with kernel privileges. **Recommendations** For iOS versions prior to 13.3, update to iOS 13.3 or later to resolve the issue. For iPadOS versions prior to 13.3, update to iPadOS 13.3 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 13.6 iPadOS versions prior to 13.6 macOS Catalina versions prior to 10.15.6 watchOS versions prior to 6.2.8 **Description** A memory corruption issue was addressed with improved input validation. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory. **Recommendations** For iOS versions prior to 13.6, update to iOS 13.6 or later. For iPadOS versions prior to 13.6, update to iPadOS 13.6 or later. For macOS Catalina versions prior to 10.15.6, update to macOS Catalina 10.15.6 or later. For watchOS versions prior to 6.2.8, update to watchOS 6.2.8 or later.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 13.5 iPadOS versions prior to 13.5 macOS Catalina versions prior to 10.15.5 **Description** A double free issue was addressed with improved memory management. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory. The issue could have allowed remote attackers to gain complete control over targeted iPhones. **Recommendations** For iOS versions prior to 13.5, update to iOS 13.5 or later. For iPadOS versions prior to 13.5, update to iPadOS 13.5 or later. For macOS Catalina versions prior to 10.15.5, update to macOS Catalina 10.15.5 or later.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 13.5 Apple iPadOS versions prior to 13.5 Apple watchOS versions prior to 6.2.5 and 5.3.7 **Description** The issue is related to a memory corruption vulnerability in the Mail client of iOS, iPadOS, and watchOS operating systems. It occurs when processing malicious email messages, allowing a remote attacker to cause a denial of service due to a buffer overflow in memory. The vulnerability can be exploited by processing a maliciously crafted mail message, which may lead to heap corruption. **Recommendations** For Apple iOS versions prior to 13.5, update to iOS 13.5 or later. For Apple iPadOS versions prior to 13.5, update to iPadOS 13.5 or later. For Apple watchOS versions prior to 6.2.5, update to watchOS 6.2.5 or later. For Apple watchOS versions prior to 5.3.7, update to watchOS 5.3.7 or later.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 12.4.7 watchOS versions prior to 5.3.7 macOS (affected versions not specified) **Description** A memory corruption issue was addressed with improved input validation. This issue allows a remote attacker to cause unexpected system termination or corrupt kernel memory. The issue is related to a wifi proximity kernel double-free vulnerability in AWDL BSS Steering. A proof of concept exploit has been demonstrated, showing the ability to remotely dump memory over the air with no user interaction. **Recommendations** For iOS versions prior to 12.4.7, update to iOS 12.4.7 or later. For watchOS versions prior to 5.3.7, update to watchOS 5.3.7 or later. For macOS, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 13.3.1 iPadOS versions prior to 13.3.1 macOS Catalina versions prior to 10.15.3 tvOS versions prior to 13.3.1 watchOS versions prior to 6.1.2 **Description** A memory corruption issue was addressed with improved input validation. Processing a maliciously crafted string may lead to heap corruption. **Recommendations** For iOS versions prior to 13.3.1, update to iOS 13.3.1 or later. For iPadOS versions prior to 13.3.1, update to iPadOS 13.3.1 or later. For macOS Catalina versions prior to 10.15.3, update to macOS Catalina 10.15.3 or later. For tvOS versions prior to 13.3.1, update to tvOS 13.3.1 or later. For watchOS versions prior to 6.1.2, update to watchOS 6.1.2 or later.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 13.3.1 iPadOS versions prior to 13.3.1 macOS Catalina versions prior to 10.15.3 tvOS versions prior to 13.3.1 watchOS versions prior to 6.1.2 **Description** The issue is related to an out-of-bounds read that has been addressed with improved bounds checking. This could allow an application to gain elevated privileges. **Recommendations** For iOS versions prior to 13.3.1, update to iOS 13.3.1 or later. For iPadOS versions prior to 13.3.1, update to iPadOS 13.3.1 or later. For macOS Catalina versions prior to 10.15.3, update to macOS Catalina 10.15.3 or later. For tvOS versions prior to 13.3.1, update to tvOS 13.3.1 or later. For watchOS versions prior to 6.1.2, update to watchOS 6.1.2 or later.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 13.2 iPadOS versions prior to 13.2 macOS Catalina versions prior to 10.15.1 tvOS versions prior to 13.2 watchOS versions prior to 6.1 **Description** A memory corruption issue was addressed with improved memory handling, which may allow an application to execute arbitrary code with system privileges. **Recommendations** For iOS versions prior to 13.2, update to iOS 13.2 or later. For iPadOS versions prior to 13.2, update to iPadOS 13.2 or later. For macOS Catalina versions prior to 10.15.1, update to macOS Catalina 10.15.1 or later. For tvOS versions prior to 13.2, update to tvOS 13.2 or later. For watchOS versions prior to 6.1, update to watchOS 6.1 or later.

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 12 Apple macOS versions prior to 10.14 Apple tvOS versions prior to 12 Apple watchOS versions prior to 5 Description: A memory corruption issue was addressed with improved input validation. Recommendations: For iOS versions prior to 12, update to iOS 12 or later. For macOS versions prior to 10.14, update to macOS Mojave 10.14 or later. For tvOS versions prior to 12, update to tvOS 12 or later. For watchOS versions prior to 5, update to watchOS 5 or later.

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 12.1.1 macOS Mojave versions prior to 10.14.2 tvOS versions prior to 12.1.1 watchOS versions prior to 5.1.2 Description: A memory corruption issue was addressed with improved input validation. Recommendations: For iOS versions prior to 12.1.1, update to iOS 12.1.1 or later. For macOS Mojave versions prior to 10.14.2, update to macOS Mojave 10.14.2 or later. For tvOS versions prior to 12.1.1, update to tvOS 12.1.1 or later. For watchOS versions prior to 5.1.2, update to watchOS 5.1.2 or later.

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 12 macOS versions prior to 10.14 tvOS versions prior to 12 watchOS versions prior to 5 Description: A memory corruption issue was addressed with improved memory handling. Recommendations: For iOS versions prior to 12, update to iOS 12 or later. For macOS versions prior to 10.14, update to macOS Mojave 10.14 or later. For tvOS versions prior to 12, update to tvOS 12 or later. For watchOS versions prior to 5, update to watchOS 5 or later.

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 12 macOS versions prior to 10.14 tvOS versions prior to 12 watchOS versions prior to 5 Description: A memory corruption issue was addressed with improved memory handling. Recommendations: For iOS versions prior to 12, update to iOS 12 or later. For macOS versions prior to 10.14, update to macOS Mojave 10.14 or later. For tvOS versions prior to 12, update to tvOS 12 or later. For watchOS versions prior to 5, update to watchOS 5 or later.