Vanhoefm

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 18.4 visionOS versions prior to 2.4 iOS versions prior to 18.4 iPadOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 **Description** The issue allows an app to gain unauthorized access to the Local Network due to inadequate permissions checking. **Recommendations** For Safari versions prior to 18.4, update to Safari 18.4. For visionOS versions prior to 2.4, update to visionOS 2.4. For iOS versions prior to 18.4, update to iOS 18.4. For iPadOS versions prior to 18.4, update to iPadOS 18.4. For macOS Sequoia versions prior to 15.4, update to macOS Sequoia 15.4.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 18 iPadOS versions prior to 18 **Description** This issue allows an app to gain unauthorized access to the Local Network. The problem was addressed through improved state management. **Recommendations** For iOS versions prior to 18, update to iOS 18 to resolve the issue. For iPadOS versions prior to 18, update to iPadOS 18 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Cloudflare WARP client for Windows (affected versions not specified) **Description** The Cloudflare WARP client for Windows assigns loopback IPv4 addresses for the DNS Servers, as it acts as a local DNS server that performs DNS queries in a secure manner. However, when connected to WARP over an IPv6-capable network, the WARP client does not assign loopback IPv6 addresses but instead uses Unique Local Addresses. Under certain conditions, this could allow an attacker to view DNS queries made by the device, as these addresses may point to unknown devices in the same local network. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.