Politepix

**Name of the Vulnerable Software and Affected Versions** visionOS versions prior to 2.4 macOS Ventura versions prior to 13.7.5 tvOS versions prior to 18.4 iOS versions prior to 18.4 iPadOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 macOS Sonoma versions prior to 14.7.5 **Description** A malicious app may be able to dismiss the system notification on the Lock Screen that a recording was started. This issue was addressed with improved access restrictions. **Recommendations** For visionOS versions prior to 2.4, update to visionOS 2.4. For macOS Ventura versions prior to 13.7.5, update to macOS Ventura 13.7.5. For tvOS versions prior to 18.4, update to tvOS 18.4. For iOS versions prior to 18.4, update to iOS 18.4. For iPadOS versions prior to 18.4, update to iPadOS 18.4. For macOS Sequoia versions prior to 15.4, update to macOS Sequoia 15.4. For macOS Sonoma versions prior to 14.7.5, update to macOS Sonoma 14.7.5.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 15 **Description** A permissions issue was addressed with additional restrictions. This issue allows a camera extension to potentially access the internet. **Recommendations** For versions prior to 15, update to macOS Sequoia 15 to resolve the issue. As a temporary workaround, consider restricting camera extension permissions to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 14 **Description** A logic issue was addressed with improved checks. This issue allows a camera extension to access the camera view from apps other than the app for which it was granted permission. The issue is related to insufficient access control in the CoreMedia component of the macOS operating system, which may allow an attacker to gain unauthorized access to the camera. **Recommendations** For versions prior to 14, update to macOS Sonoma 14 to resolve the issue. As a temporary workaround, consider restricting access to camera extensions to minimize the risk of exploitation.