R3Df09

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 17.1 iPadOS versions prior to 17.1 macOS Ventura versions prior to 13.6.3 macOS Sonoma versions prior to 14.1 macOS Monterey versions prior to 12.7.1 **Description** The issue was addressed with improved checks. An app with root privileges may be able to access private information. **Recommendations** For iOS versions prior to 17.1, update to iOS 17.1 to resolve the issue. For iPadOS versions prior to 17.1, update to iPadOS 17.1 to resolve the issue. For macOS Ventura versions prior to 13.6.3, update to macOS Ventura 13.6.3 to resolve the issue. For macOS Sonoma versions prior to 14.1, update to macOS Sonoma 14.1 to resolve the issue. For macOS Monterey versions prior to 12.7.1, update to macOS Monterey 12.7.1 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 14 **Description** A permissions issue was addressed with additional restrictions. This issue allows a sandboxed process to potentially circumvent sandbox restrictions. **Recommendations** For versions prior to 14, update to macOS Sonoma 14 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 14 **Description** An authorization issue was addressed with improved state management, allowing an app to potentially bypass certain Privacy preferences. **Recommendations** For versions prior to 14, update to macOS Sonoma 14 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS Ventura versions prior to 13.6 tvOS versions prior to 17 iOS versions prior to 16.7 iPadOS versions prior to 16.7 macOS Monterey versions prior to 12.7 watchOS versions prior to 10 iOS versions prior to 17 iPadOS versions prior to 17 macOS Sonoma versions prior to 14 **Description** A permissions issue was addressed with additional restrictions. This issue may allow an app to delete files for which it does not have permission. The vulnerability is related to errors in processing permissions in the libxpc library of the operating systems. **Recommendations** For macOS Ventura versions prior to 13.6, update to macOS Ventura 13.6. For tvOS versions prior to 17, update to tvOS 17. For iOS versions prior to 16.7, update to iOS 16.7. For iPadOS versions prior to 16.7, update to iPadOS 16.7. For macOS Monterey versions prior to 12.7, update to macOS Monterey 12.7. For watchOS versions prior to 10, update to watchOS 10. For iOS versions prior to 17, update to iOS 17. For iPadOS versions prior to 17, update to iPadOS 17. For macOS Sonoma versions prior to 14, update to macOS Sonoma 14.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 13.6 macOS versions prior to 12.7 macOS versions prior to 14 tvOS versions prior to 17 iOS versions prior to 16.7 iOS versions prior to 17 iPadOS versions prior to 16.7 iPadOS versions prior to 17 watchOS versions prior to 10 **Description** The issue is related to an authorization problem that has been addressed with improved state management. This may allow an app to access protected user data. The estimated number of potentially affected devices is not specified. **Recommendations** For macOS versions prior to 13.6, update to macOS Ventura 13.6 or later. For macOS versions prior to 12.7, update to macOS Monterey 12.7 or later. For macOS versions prior to 14, update to macOS Sonoma 14 or later. For tvOS versions prior to 17, update to tvOS 17 or later. For iOS versions prior to 16.7, update to iOS 16.7 or later. For iOS versions prior to 17, update to iOS 17 or later. For iPadOS versions prior to 16.7, update to iPadOS 16.7 or later. For iPadOS versions prior to 17, update to iPadOS 17 or later. For watchOS versions prior to 10, update to watchOS 10 or later.

**Name of the Vulnerable Software and Affected Versions** libxpc versions prior to macOS Monterey 12.6.8 libxpc versions prior to iOS 16.6 libxpc versions prior to iPadOS 16.6 libxpc versions prior to macOS Big Sur 11.7.9 libxpc versions prior to macOS Ventura 13.5 libxpc versions prior to watchOS 9.6 **Description** The issue is related to a path handling problem that has been addressed with improved validation. This allows an app to potentially gain root privileges, enabling a malicious actor to elevate their privileges. **Recommendations** For versions prior to macOS Monterey 12.6.8, update to macOS Monterey 12.6.8 or later. For versions prior to iOS 16.6, update to iOS 16.6 or later. For versions prior to iPadOS 16.6, update to iPadOS 16.6 or later. For versions prior to macOS Big Sur 11.7.9, update to macOS Big Sur 11.7.9 or later. For versions prior to macOS Ventura 13.5, update to macOS Ventura 13.5 or later. For versions prior to watchOS 9.6, update to watchOS 9.6 or later.

**Name of the Vulnerable Software and Affected Versions** watchOS versions prior to 9.5 iOS versions prior to 16.5 iPadOS versions prior to 16.5 macOS Ventura versions prior to 13.4 **Description** The issue is related to insufficient access control in the operating systems, which may allow an attacker to bypass existing security restrictions. An app may be able to bypass Privacy preferences. The estimated number of potentially affected devices worldwide is not specified. **Recommendations** For watchOS versions prior to 9.5, update to watchOS 9.5 to resolve the issue. For iOS versions prior to 16.5, update to iOS 16.5 to resolve the issue. For iPadOS versions prior to 16.5, update to iPadOS 16.5 to resolve the issue. For macOS Ventura versions prior to 13.4, update to macOS Ventura 13.4 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.5 macOS Big Sur versions prior to 11.6.8 Security Update versions prior to 2022-005 Catalina **Description** An access issue was addressed with improvements to the sandbox, allowing an app to potentially access sensitive user information. **Recommendations** For macOS versions prior to 12.5, update to macOS Monterey 12.5. For macOS Big Sur versions prior to 11.6.8, update to macOS Big Sur 11.6.8. For Security Update versions prior to 2022-005 Catalina, apply Security Update 2022-005 Catalina.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.5 **Description** A logic issue was addressed with improved checks, allowing an app to potentially bypass Privacy preferences. **Recommendations** For versions prior to 12.5, update to macOS Monterey 12.5 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to Security Update 2022-005 Catalina macOS Big Sur versions prior to 11.6.8 macOS Monterey versions prior to 12.5 **Description** The issue allows an app to potentially overwrite arbitrary files due to inadequate file handling. This could lead to unauthorized modifications of system or user files. **Recommendations** For macOS versions prior to Security Update 2022-005 Catalina, apply Security Update 2022-005. For macOS Big Sur versions prior to 11.6.8, update to version 11.6.8 or later. For macOS Monterey versions prior to 12.5, update to version 12.5 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.4 macOS Big Sur versions prior to 11.6.6 **Description** The issue allows an app to bypass Privacy preferences. It was addressed with improved checks. **Recommendations** For macOS versions prior to 12.4, update to macOS Monterey 12.4. For macOS Big Sur versions prior to 11.6.6, update to macOS Big Sur 11.6.6.

**Name of the Vulnerable Software and Affected Versions** Apple tvOS versions prior to 15.4 Apple iOS versions prior to 15.4 Apple iPadOS versions prior to 15.4 Apple macOS Monterey versions prior to 12.3 Apple watchOS versions prior to 8.5 **Description** The issue allows a malicious application to read other applications' settings. This was addressed with additional permissions checks. **Recommendations** For Apple tvOS versions prior to 15.4, update to tvOS 15.4 or later. For Apple iOS versions prior to 15.4, update to iOS 15.4 or later. For Apple iPadOS versions prior to 15.4, update to iPadOS 15.4 or later. For Apple macOS Monterey versions prior to 12.3, update to macOS Monterey 12.3 or later. For Apple watchOS versions prior to 8.5, update to watchOS 8.5 or later.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 15.3 iPadOS versions prior to 15.3 watchOS versions prior to 8.4 tvOS versions prior to 15.3 macOS Monterey versions prior to 12.2 macOS Big Sur versions prior to 11.6.3 **Description** An issue existed within the path validation logic for symlinks, which was addressed with improved path sanitization. This could allow an application to access a user's files. **Recommendations** For iOS versions prior to 15.3, update to iOS 15.3 or later. For iPadOS versions prior to 15.3, update to iPadOS 15.3 or later. For watchOS versions prior to 8.4, update to watchOS 8.4 or later. For tvOS versions prior to 15.3, update to tvOS 15.3 or later. For macOS Monterey versions prior to 12.2, update to macOS Monterey 12.2 or later. For macOS Big Sur versions prior to 11.6.3, update to macOS Big Sur 11.6.3 or later.

**Name of the Vulnerable Software and Affected Versions** tvOS versions prior to 15.3 iOS versions prior to 15.3 iPadOS versions prior to 15.3 watchOS versions prior to 8.4 macOS Monterey versions prior to 12.2 **Description** A logic issue was addressed with improved validation. A malicious application may be able to gain root privileges. **Recommendations** For tvOS versions prior to 15.3, update to tvOS 15.3 or later. For iOS versions prior to 15.3, update to iOS 15.3 or later. For iPadOS versions prior to 15.3, update to iPadOS 15.3 or later. For watchOS versions prior to 8.4, update to watchOS 8.4 or later. For macOS Monterey versions prior to 12.2, update to macOS Monterey 12.2 or later.

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 14.5 iPadOS versions prior to 14.5 Description: An issue was found that could potentially expose a user's password on screen due to inadequate password obscuring in screenshots. This issue has been addressed with improved logic. Recommendations: For iOS versions prior to 14.5, update to iOS 14.5 or later to resolve the issue. For iPadOS versions prior to 14.5, update to iPadOS 14.5 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS Big Sur versions prior to 11.6.2 macOS Catalina versions prior to Security Update 2021-008 **Description** A path handling issue was addressed with improved validation. This issue may cause unexpected JavaScript execution from a file on disk when processing a maliciously crafted URL. The vulnerability is related to insufficient input validation in the Help Viewer component of macOS Big Sur, which may allow an attacker to execute arbitrary JavaScript code. **Recommendations** For macOS Big Sur versions prior to 11.6.2, update to macOS Big Sur 11.6.2 or later to resolve the issue. For macOS Catalina versions prior to Security Update 2021-008, apply Security Update 2021-008 to resolve the issue. As a temporary workaround, consider restricting access to maliciously crafted URLs to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 15 Apple iPadOS versions prior to 15 Apple tvOS versions prior to 15 Apple watchOS versions prior to 8 **Description** A logic issue was addressed with improved state management, which may allow a sandboxed process to circumvent sandbox restrictions. **Recommendations** For Apple iOS versions prior to 15, update to iOS 15 or later. For Apple iPadOS versions prior to 15, update to iPadOS 15 or later. For Apple tvOS versions prior to 15, update to tvOS 15 or later. For Apple watchOS versions prior to 8, update to watchOS 8 or later.

**Name of the Vulnerable Software and Affected Versions** macOS Catalina versions prior to Security Update 2021-005 iOS versions prior to 14.8 iPadOS versions prior to 14.8 iOS version 15 iPadOS version 15 watchOS version 8 macOS Big Sur version 11.6 **Description** A validation issue existed in the handling of symlinks, which has been addressed with improved validation of symlinks. This issue may allow an application to access restricted files. **Recommendations** For macOS Catalina, apply Security Update 2021-005 to resolve the issue. For iOS and iPadOS, update to version 14.8 or later to resolve the issue. For watchOS, update to version 8 to resolve the issue. For macOS Big Sur, update to version 11.6 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 11.6.2 tvOS versions prior to 15.2 macOS Monterey versions prior to 12.1 macOS Catalina versions prior to Security Update 2021-008 iOS versions prior to 15.2 iPadOS versions prior to 15.2 watchOS versions prior to 8.3 **Description** A local attacker may be able to elevate their privileges due to this issue. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited. **Recommendations** For macOS versions prior to 11.6.2, update to macOS Big Sur 11.6.2. For tvOS versions prior to 15.2, update to tvOS 15.2. For macOS Monterey versions prior to 12.1, update to macOS Monterey 12.1. For macOS Catalina versions prior to Security Update 2021-008, apply Security Update 2021-008. For iOS versions prior to 15.2, update to iOS 15.2. For iPadOS versions prior to 15.2, update to iPadOS 15.2. For watchOS versions prior to 8.3, update to watchOS 8.3.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 11.6.3 macOS Catalina versions prior to Security Update 2022-001 **Description** A malicious application may be able to bypass certain Privacy preferences due to this issue. The issue was addressed with improved checks. **Recommendations** For macOS Catalina, apply Security Update 2022-001 to resolve the issue. For macOS Big Sur, update to version 11.6.3 to resolve the issue.