Mickey Jin

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 18.7.5 iPadOS versions prior to 18.7.5 Safari versions prior to 26.3 macOS Tahoe versions prior to 26.3 **Description** A logic issue existed due to insufficient validation. This allowed an application to potentially access a user's Safari history. **Recommendations** Update iOS to version 18.7.5 or later. Update iPadOS to version 18.7.5 or later. Update Safari to version 26.3 or later. Update macOS Tahoe to version 26.3 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 26.3 **Description** A flaw exists in how the operating system parses directory paths. This can lead to a situation where an application gains unauthorized access to sensitive user data due to insufficient path validation. **Recommendations** Update to macOS version 26.3 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to Sequoia 15.7.4 macOS versions prior to Tahoe 26.3 macOS versions prior to Sonoma 14.8.4 **Description** An injection issue existed due to insufficient validation, potentially allowing an application to access sensitive user data. **Recommendations** Update to macOS Sequoia version 15.7.4. Update to macOS Tahoe version 26.3. Update to macOS Sonoma version 14.8.4.

**Name of the Vulnerable Software and Affected Versions** macOS Sequoia versions 15.7.4 macOS Tahoe version 26.3 macOS Sonoma versions 14.8.4 **Description** A privacy issue existed where an application could potentially access sensitive user data. The issue was resolved with improved checks. **Recommendations** Update macOS to version 15.7.4 for Sequoia users. Update macOS to version 26.3 for Tahoe users. Update macOS to version 14.8.4 for Sonoma users.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to Sequoia 15.7.4 macOS versions prior to Tahoe 26.3 macOS versions prior to Sonoma 14.8.4 visionOS versions prior to 26.3 **Description** A flaw exists in how the operating system parses directory paths. Improved path validation was implemented to correct this. An application may be able to access sensitive user data as a result of this issue. **Recommendations** Update to macOS Sequoia version 15.7.4 or later. Update to macOS Tahoe version 26.3 or later. Update to macOS Sonoma version 14.8.4 or later. Update to visionOS version 26.3 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 26.2 macOS Sonoma versions prior to 14.8.3 macOS Sequoia versions prior to 15.7.3 iOS versions prior to 18.7.3 iPadOS versions prior to 18.7.3 **Description** The issue involves a Trust Consent and Control (TCC) bypass in macOS, iOS, and iPadOS. An application may be able to access sensitive user data without explicit user permission. The flaw abuses trust in Apple-signed accessibility components, specifically VoiceOver and ScreenReader, along with a Time-of-Check-to-Time-of-Use (TOCTOU) weakness. This allows for silent execution of AppleScript/AppleEvents, potentially granting unauthorized access to files, microphone data, and camera data. The vulnerability resides within the `ScreenReader.framework` and involves bypassing TCC through manipulation of file-path-based checks and potential code injection into Apple-signed binaries. The issue was addressed with improved checks and entitlement validation via audit token. **Recommendations** Update to macOS version 26.2 or later. Update to macOS Sonoma version 14.8.3 or later. Update to macOS Sequoia version 15.7.3 or later. Update to iOS version 18.7.3 or later. Update to iPadOS version 18.7.3 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 15.7.2 **Description** An application may be able to escape its sandbox. This issue was resolved through enhanced security checks. **Recommendations** Update to macOS version 15.7.2.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 14.8.2 macOS versions prior to 15.7.2 **Description** A permissions issue existed that allowed an application to potentially break out of its sandbox. This was addressed through the implementation of additional restrictions. **Recommendations** Update to macOS version 14.8.2 or later. Update to macOS version 15.7.2 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to Sonoma 14.8.2 macOS versions prior to Sequoia 15.7.2 **Description** A flaw exists where an application could potentially escape its sandbox. The issue was addressed through the implementation of additional checks. **Recommendations** Update to macOS Sonoma version 14.8.2 or later. Update to macOS Sequoia version 15.7.2 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to Sonoma 14.8.2 macOS versions prior to Sequoia 15.7.2 **Description** A flaw exists that could allow an application to access sensitive user data on Intel-based Mac computers. This issue is related to a downgrade scenario and was addressed through enhanced code-signing restrictions. **Recommendations** Update to macOS Sonoma version 14.8.2. Update to macOS Sequoia version 15.7.2.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to Sonoma 14.8.2 macOS versions prior to Sequoia 15.7.2 **Description** A permissions issue existed that allowed an application to potentially access sensitive user data. The issue was resolved by implementing additional restrictions. **Recommendations** Update to macOS Sonoma version 14.8.2 or later. Update to macOS Sequoia version 15.7.2 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 15.7.2 **Description** A flaw exists in macOS that could allow an application to access user-sensitive data due to a downgrade issue affecting Intel-based Mac computers. This issue was addressed with additional code-signing restrictions. **Recommendations** Update to macOS version 15.7.2.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to Tahoe 26 **Description** An application may be able to break out of its sandbox due to vulnerable code. The issue was addressed by removing the vulnerable code. **Recommendations** Update to macOS Tahoe 26 or later.

**Name of the Vulnerable Software and Affected Versions** Xcode versions prior to 26 **Description** An application may be able to read and write files outside of its designated sandbox. This is due to insufficient checks. **Recommendations** Update to Xcode version 26.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to Sonoma 14.8 macOS versions prior to Sequoia 15.7 macOS Tahoe versions prior to 26 **Description** A permissions issue existed where an application could potentially access protected user data. This was addressed by implementing additional restrictions. **Recommendations** Update to macOS Sonoma version 14.8 or later. Update to macOS Sequoia version 15.7 or later. Update to macOS Tahoe version 26 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 14.8 **Description** A logic issue allowed an application to potentially access user-sensitive data. This issue was resolved with improved checks. **Recommendations** Update to macOS version 14.8.

**Name of the Vulnerable Software and Affected Versions** Xcode versions prior to 26 **Description** An application may be able to break out of its sandbox due to insufficient security checks. **Recommendations** Update to Xcode version 26.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to Sequoia 15.7 macOS versions prior to Sonoma 14.8 macOS versions prior to Tahoe 26 **Description** An application may be able to access protected user data. The issue was resolved by blocking unsigned services from launching on Intel Macs. **Recommendations** Update to macOS Sequoia 15.7 or later. Update to macOS Sonoma 14.8 or later. Update to macOS Tahoe 26 or later.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 26 iPadOS versions prior to 26 macOS versions prior to Tahoe 26 tvOS versions prior to 26 watchOS versions prior to 26 visionOS versions prior to 26 **Description** An application may be able to access sensitive user data due to a permissions issue. This issue was addressed with additional restrictions. **Recommendations** Update to iOS version 26 or later. Update to iPadOS version 26 or later. Update to macOS version Tahoe 26 or later. Update to tvOS version 26 or later. Update to watchOS version 26 or later. Update to visionOS version 26 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to Tahoe 26 **Description** A flaw allows an application to potentially access protected user data due to a downgrade issue. This issue was addressed with additional code-signing restrictions. **Recommendations** Update to macOS Tahoe 26.