Siguza

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.3 iOS versions prior to 14.5 iPadOS versions prior to 14.5 watchOS versions prior to 7.4 tvOS versions prior to 14.5 Description: The issue concerns a problem in code signature validation that has been addressed with improved checks. A malicious application may be able to bypass Privacy preferences. Recommendations: For macOS versions prior to 11.3, update to macOS Big Sur 11.3. For iOS versions prior to 14.5, update to iOS 14.5. For iPadOS versions prior to 14.5, update to iPadOS 14.5. For watchOS versions prior to 7.4, update to watchOS 7.4. For tvOS versions prior to 14.5, update to tvOS 14.5.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 13.1 iPadOS versions prior to 13.1 tvOS versions prior to 13 **Description** A malicious application may be able to determine kernel memory layout due to an issue with permissions logic. **Recommendations** For iOS versions prior to 13.1, update to iOS 13.1 or later. For iPadOS versions prior to 13.1, update to iPadOS 13.1 or later. For tvOS versions prior to 13, update to tvOS 13 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 10.13.3 **Description** The issue involves the `IOHIDFamily` component and allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. **Recommendations** For versions prior to 10.13.3, update to version 10.13.3 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 9.3.5 **Description** The issue is caused by a memory corruption vulnerability in the WebKit component of Apple iOS, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. This can be achieved by exploiting a buffer overflow in memory. **Recommendations** For versions prior to 9.3.5, update to version 9.3.5 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 9.3.5 **Description** The issue is related to insufficient access control in the kernel of the iOS operating system. It can be exploited to execute arbitrary code in a privileged context or cause a denial of service, such as memory corruption, by using a specially crafted app. **Recommendations** For versions prior to 9.3.5, update to version 9.3.5 or later to resolve the issue. As a temporary workaround, consider restricting the installation of apps from untrusted sources to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 9.3.5 **Description** The issue is related to the kernel in Apple iOS, which lacks protection for sensitive data. This allows attackers to obtain sensitive information from memory via a crafted app. **Recommendations** For versions prior to 9.3.5, update to version 9.3.5 or later to resolve the issue.