Kenneth Chew

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 26.2 **Description** A logic issue existed due to insufficient validation, potentially allowing an application to bypass Gatekeeper security checks. **Recommendations** Update to macOS version 26.2.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 18.1 iOS versions prior to 17.7.1 iPadOS versions prior to 18.1 iPadOS versions prior to 17.7.1 **Description** A logic issue was addressed with improved checks, allowing an attacker with physical access to potentially access contacts from the lock screen. **Recommendations** For iOS versions prior to 18.1, update to iOS 18.1 to resolve the issue. For iOS versions prior to 17.7.1, update to iOS 17.7.1 to resolve the issue. For iPadOS versions prior to 18.1, update to iPadOS 18.1 to resolve the issue. For iPadOS versions prior to 17.7.1, update to iPadOS 17.7.1 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 18.2 macOS Sequoia versions prior to 15.2 watchOS versions prior to 11.2 iOS versions prior to 18.2 iPadOS versions prior to 18.2 **Description** The issue is related to incorrect authorization in the State Management Handler component of iOS, iPadOS, macOS, watchOS, and the Safari browser. Exploitation of this issue may allow an attacker to access confidential information. The problem is associated with a lack of proper authentication, which can be exploited to access Private Browsing tabs without authentication. **Recommendations** For Safari versions prior to 18.2, update to Safari 18.2 to resolve the issue. For macOS Sequoia versions prior to 15.2, update to macOS Sequoia 15.2 to resolve the issue. For watchOS versions prior to 11.2, update to watchOS 11.2 to resolve the issue. For iOS versions prior to 18.2, update to iOS 18.2 to resolve the issue. For iPadOS versions prior to 18.2, update to iPadOS 18.2 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 18 iPadOS versions prior to 18 **Description** An authentication issue was addressed with improved state management, allowing Private Browsing tabs to be accessed without authentication. The issue has been exploited publicly. **Recommendations** For iOS versions prior to 18, update to iOS 18 to resolve the issue. For iPadOS versions prior to 18, update to iPadOS 18 to resolve the issue.