Mohamed Ghannam

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 17 Apple iPadOS versions prior to 17 Apple tvOS versions prior to 17 Apple watchOS versions prior to 10 Apple macOS versions prior to Sonoma 14 **Description** The issue was addressed with improved memory handling. An app may be able to execute arbitrary code with kernel privileges. **Recommendations** For Apple iOS versions prior to 17, update to iOS 17 to resolve the issue. For Apple iPadOS versions prior to 17, update to iPadOS 17 to resolve the issue. For Apple tvOS versions prior to 17, update to tvOS 17 to resolve the issue. For Apple watchOS versions prior to 10, update to watchOS 10 to resolve the issue. For Apple macOS versions prior to Sonoma 14, update to macOS Sonoma 14 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** tvOS versions prior to 17 iOS versions prior to 17 iPadOS versions prior to 17 watchOS versions prior to 10 macOS versions prior to Sonoma 14 **Description** The issue was addressed with improved memory handling. An app may be able to disclose kernel memory. **Recommendations** For tvOS versions prior to 17, update to tvOS 17 to resolve the issue. For iOS versions prior to 17, update to iOS 17 to resolve the issue. For iPadOS versions prior to 17, update to iPadOS 17 to resolve the issue. For watchOS versions prior to 10, update to watchOS 10 to resolve the issue. For macOS versions prior to Sonoma 14, update to macOS Sonoma 14 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 14 iOS versions prior to 17 iPadOS versions prior to 17 **Description** The issue is related to a buffer overflow in the kernel of the operating system, which may allow an app to execute arbitrary code with kernel privileges. This is due to improper memory handling. **Recommendations** For macOS versions prior to 14, update to macOS Sonoma 14 to resolve the issue. For iOS versions prior to 17, update to iOS 17 to resolve the issue. For iPadOS versions prior to 17, update to iPadOS 17 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** watchOS versions prior to 9.5 iPadOS versions prior to 16.5 iOS versions prior to 16.5 **Description** The issue is related to a buffer overflow in the Neural Engine component of the operating systems, which may allow an attacker to gain elevated privileges. The problem was addressed with improved memory handling. **Recommendations** For watchOS versions prior to 9.5, update to watchOS 9.5 to resolve the issue. For iPadOS versions prior to 16.5, update to iPadOS 16.5 to resolve the issue. For iOS versions prior to 16.5, update to iOS 16.5 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 16.6 iPadOS versions prior to 16.6 watchOS versions prior to 9.6 **Description** The issue was addressed with improved memory handling. An app may be able to execute arbitrary code with kernel privileges. **Recommendations** For iOS versions prior to 16.6, update to iOS 16.6 to resolve the issue. For iPadOS versions prior to 16.6, update to iPadOS 16.6 to resolve the issue. For watchOS versions prior to 9.6, update to watchOS 9.6 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 16.6 iPadOS versions prior to 16.6 macOS Ventura versions prior to 13.5 watchOS versions prior to 9.6 **Description** The issue is related to a buffer overflow in memory operations, which may allow an app to execute arbitrary code with kernel privileges. This can potentially be exploited by an attacker to gain elevated access. **Recommendations** For iOS versions prior to 16.6, update to iOS 16.6 or later. For iPadOS versions prior to 16.6, update to iPadOS 16.6 or later. For macOS Ventura versions prior to 13.5, update to macOS Ventura 13.5 or later. For watchOS versions prior to 9.6, update to watchOS 9.6 or later.

**Name of the Vulnerable Software and Affected Versions** watchOS versions prior to 9.6 macOS Big Sur versions prior to 11.7.9 iOS versions prior to 15.7.8 iPadOS versions prior to 15.7.8 macOS Monterey versions prior to 12.6.8 tvOS versions prior to 16.6 iOS versions prior to 16.6 iPadOS versions prior to 16.6 macOS Ventura versions prior to 13.5 **Description** A use-after-free issue was addressed with improved memory management, which may allow an app to execute arbitrary code with kernel privileges. This issue is related to the use of memory after it has been freed. **Recommendations** For watchOS versions prior to 9.6, update to watchOS 9.6. For macOS Big Sur versions prior to 11.7.9, update to macOS Big Sur 11.7.9. For iOS versions prior to 15.7.8, update to iOS 15.7.8. For iPadOS versions prior to 15.7.8, update to iPadOS 15.7.8. For macOS Monterey versions prior to 12.6.8, update to macOS Monterey 12.6.8. For tvOS versions prior to 16.6, update to tvOS 16.6. For iOS versions prior to 16.6, update to iOS 16.6. For iPadOS versions prior to 16.6, update to iPadOS 16.6. For macOS Ventura versions prior to 13.5, update to macOS Ventura 13.5.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 16.4 iPadOS versions prior to 16.4 **Description** The issue was addressed with improved memory handling. An app may be able to execute arbitrary code with kernel privileges. **Recommendations** For iOS versions prior to 16.4, update to iOS 16.4 to resolve the issue. For iPadOS versions prior to 16.4, update to iPadOS 16.4 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 15.7.8 iPadOS versions prior to 15.7.8 macOS Monterey versions prior to 12.6.4 iOS versions prior to 16.4 iPadOS versions prior to 16.4 macOS Big Sur versions prior to 11.7.5 **Description** The issue allows an app to potentially execute arbitrary code with kernel privileges due to a problem that was addressed with improved memory handling. **Recommendations** For iOS versions prior to 15.7.8, update to iOS 15.7.8 or later. For iPadOS versions prior to 15.7.8, update to iPadOS 15.7.8 or later. For macOS Monterey versions prior to 12.6.4, update to macOS Monterey 12.6.4 or later. For iOS versions prior to 16.4, update to iOS 16.4 or later. For iPadOS versions prior to 16.4, update to iPadOS 16.4 or later. For macOS Big Sur versions prior to 11.7.5, update to macOS Big Sur 11.7.5 or later.

**Name of the Vulnerable Software and Affected Versions** macOS Ventura versions prior to 13.3 iOS versions prior to 16.4 iPadOS versions prior to 16.4 iOS versions prior to 15.7.6 iPadOS versions prior to 15.7.6 **Description** The issue allows an app to potentially break out of its sandbox. This was addressed with improved checks. **Recommendations** For macOS Ventura versions prior to 13.3, update to macOS Ventura 13.3. For iOS versions prior to 16.4, update to iOS 16.4. For iPadOS versions prior to 16.4, update to iPadOS 16.4. For iOS versions prior to 15.7.6, update to iOS 15.7.6. For iPadOS versions prior to 15.7.6, update to iPadOS 15.7.6.

**Name of the Vulnerable Software and Affected Versions** flar2 ElementalX versions up to 6.x **Description** A problematic vulnerability has been found, affecting the function `xfrm dump policy done` of the file `net/xfrm/xfrm user.c` of the component `ipsec`. The manipulation leads to denial of service. **Recommendations** For flar2 ElementalX versions up to 6.x, upgrade to version 7.00 to address this issue. As a temporary workaround, consider disabling the `xfrm dump policy done` function until the patch is applied. Restrict access to the `ipsec` component to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 15.7.1 iOS versions prior to 16.1 iPadOS versions prior to 15.7.1 iPadOS versions prior to 16 watchOS versions prior to 9.1 **Description** The issue allows an app to potentially execute arbitrary code with kernel privileges due to a problem that was addressed with improved memory handling. **Recommendations** For iOS versions prior to 15.7.1, update to iOS 15.7.1 or later. For iOS versions prior to 16.1, update to iOS 16.1 or later. For iPadOS versions prior to 15.7.1, update to iPadOS 15.7.1 or later. For iPadOS versions prior to 16, update to iPadOS 16 or later. For watchOS versions prior to 9.1, update to watchOS 9.1 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 13 **Description** The issue is related to a buffer overflow in the Apple Neural Engine component of the macOS operating system, which may allow an attacker to execute arbitrary code with kernel privileges. The problem was addressed with improved memory handling. **Recommendations** For versions prior to 13, update to macOS Ventura 13 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 15.7 iPadOS versions prior to 15.7 macOS versions prior to Ventura 13 watchOS versions prior to 9 **Description** The issue allows an app to execute arbitrary code with kernel privileges due to a problem that was addressed with improved memory handling. **Recommendations** For iOS versions prior to 15.7, update to iOS 15.7 or later. For iPadOS versions prior to 15.7, update to iPadOS 15.7 or later. For macOS versions prior to Ventura 13, update to macOS Ventura 13 or later. For watchOS versions prior to 9, update to watchOS 9 or later.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 16 macOS versions prior to Ventura 13 watchOS versions prior to 9 **Description** The issue allows an app to potentially leak sensitive kernel state due to inadequate memory handling. **Recommendations** For iOS versions prior to 16, update to iOS 16 to resolve the issue. For macOS versions prior to Ventura 13, update to macOS Ventura 13 to resolve the issue. For watchOS versions prior to 9, update to watchOS 9 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 16 watchOS versions prior to 9 **Description** The issue allows an app to potentially execute arbitrary code with kernel privileges due to a problem that was addressed with improved memory handling. **Recommendations** For iOS versions prior to 16, update to iOS 16 or later. For watchOS versions prior to 9, update to watchOS 9 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 13 **Description** The issue is related to a buffer overflow in memory, which can allow an attacker to execute arbitrary code with kernel privileges. The problem was addressed with improved memory handling. An app may be able to execute arbitrary code with kernel privileges. **Recommendations** For versions prior to 13, update to macOS Ventura 13 to resolve the issue. As a temporary workaround, consider restricting access to sensitive areas of the system to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 15.7 iPadOS versions prior to 15.7 iOS version 16 and later are not affected, but versions prior to 16 are vulnerable if earlier than 15.7 macOS versions prior to Ventura 13 watchOS versions prior to 9 **Description** The issue was addressed with improved memory handling. An app may be able to execute arbitrary code with kernel privileges. **Recommendations** For iOS versions prior to 15.7, update to iOS 15.7 or later. For iPadOS versions prior to 15.7, update to iPadOS 15.7 or later. For macOS versions prior to Ventura 13, update to macOS Ventura 13 or later. For watchOS versions prior to 9, update to watchOS 9 or later.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 15.6 iPadOS versions prior to 15.6 macOS Monterey versions prior to 12.5 **Description** An integer overflow issue was addressed through improved input validation, potentially allowing an app to execute arbitrary code with kernel privileges. **Recommendations** For iOS versions prior to 15.6, update to iOS 15.6 or later. For iPadOS versions prior to 15.6, update to iPadOS 15.6 or later. For macOS Monterey versions prior to 12.5, update to macOS Monterey 12.5 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.5 watchOS versions prior to 8.7 iOS versions prior to 15.6 iPadOS versions prior to 15.6 **Description** The issue was addressed with improved memory handling. An app may be able to execute arbitrary code with kernel privileges. **Recommendations** For macOS versions prior to 12.5, update to macOS Monterey 12.5. For watchOS versions prior to 8.7, update to watchOS 8.7. For iOS versions prior to 15.6, update to iOS 15.6. For iPadOS versions prior to 15.6, update to iPadOS 15.6.