Xiaolong Bai

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 14.8.3 macOS Sequoia versions prior to 15.7.3 macOS Tahoe version 26.2 iOS versions prior to 18.7.3 iPadOS versions prior to 18.7.3 visionOS version 26.2 tvOS version 26.2 watchOS version 26.2 **Description** An integer overflow issue was identified and addressed by implementing 64-bit timestamps. This could allow an application to gain root privileges. The issue affects multiple Apple operating systems. The vulnerability was discovered by Kaitao Xie and Xiaolong Bai of Alibaba Group. **Recommendations** Update macOS to version 14.8.3 or later. Update macOS Sequoia to version 15.7.3 or later. Update visionOS to version 26.2. Update tvOS to version 26.2. Update watchOS to version 26.2. Update iOS to version 18.7.3 or later. Update iPadOS to version 18.7.3 or later.

Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 2.1 iOS versions prior to 18.1 iPadOS versions prior to 18.1 iOS versions prior to 17.7.1 iPadOS versions prior to 17.7.1 tvOS versions prior to 18.1 macOS Sonoma versions prior to 14.7.1 watchOS versions prior to 11.1 macOS Ventura versions prior to 13.7.1 Description: A denial-of-service issue was addressed with improved input validation. A remote attacker may be able to cause a denial-of-service. Recommendations: Update to visionOS 2.1 or later. Update to iOS 18.1 or later. Update to iPadOS 18.1 or later. Update to iOS 17.7.1 or later. Update to iPadOS 17.7.1 or later. Update to tvOS 18.1 or later. Update to macOS Sonoma 14.7.1 or later. Update to watchOS 11.1 or later. Update to macOS Ventura 13.7.1 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.6.8 macOS Big Sur versions prior to 11.7.9 macOS Ventura versions prior to 13.5 iOS versions prior to 15.7.8 iOS versions prior to 16.6 iPadOS versions prior to 15.7.8 iPadOS versions prior to 16.6 tvOS versions prior to 16.6 watchOS versions prior to 9.6 **Description** A use-after-free issue was addressed with improved memory management, which may allow an app to execute arbitrary code with kernel privileges. The issue is related to memory management and can be exploited to gain kernel privileges. **Recommendations** For macOS versions prior to 12.6.8, update to macOS Monterey 12.6.8 or later. For macOS Big Sur versions prior to 11.7.9, update to macOS Big Sur 11.7.9 or later. For macOS Ventura versions prior to 13.5, update to macOS Ventura 13.5 or later. For iOS versions prior to 15.7.8, update to iOS 15.7.8 or later. For iOS versions prior to 16.6, update to iOS 16.6 or later. For iPadOS versions prior to 15.7.8, update to iPadOS 15.7.8 or later. For iPadOS versions prior to 16.6, update to iPadOS 16.6 or later. For tvOS versions prior to 16.6, update to tvOS 16.6 or later. For watchOS versions prior to 9.6, update to watchOS 9.6 or later.

**Name of the Vulnerable Software and Affected Versions** macOS Ventura versions prior to 13.5 **Description** The issue allows an app to bypass Privacy preferences. It was addressed with improved checks. **Recommendations** For macOS Ventura versions prior to 13.5, update to macOS Ventura 13.5 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 15.7.6 iPadOS versions prior to 15.7.6 macOS Big Sur versions prior to 11.7.7 macOS Monterey versions prior to 12.6.6 macOS Ventura versions prior to 13.4 **Description** A logic issue was addressed with improved state management, which may allow an app to modify protected parts of the file system. **Recommendations** For iOS versions prior to 15.7.6, update to iOS 15.7.6 or later. For iPadOS versions prior to 15.7.6, update to iPadOS 15.7.6 or later. For macOS Big Sur versions prior to 11.7.7, update to macOS Big Sur 11.7.7 or later. For macOS Monterey versions prior to 12.6.6, update to macOS Monterey 12.6.6 or later. For macOS Ventura versions prior to 13.4, update to macOS Ventura 13.4 or later.

**Name of the Vulnerable Software and Affected Versions** watchOS versions prior to 9.5 iOS versions prior to 15.7.6 and prior to 16.5 iPadOS versions prior to 15.7.6 and prior to 16.5 macOS versions prior to Ventura 13.4 **Description** The issue is related to insufficient warnings about dangerous actions, which may allow an attacker to bypass existing security restrictions. A shortcut may be able to use sensitive data with certain actions without prompting the user. **Recommendations** For watchOS versions prior to 9.5, update to watchOS 9.5 or later. For iOS versions prior to 15.7.6, update to iOS 15.7.6 or later. For iOS versions prior to 16.5, update to iOS 16.5 or later. For iPadOS versions prior to 15.7.6, update to iPadOS 15.7.6 or later. For iPadOS versions prior to 16.5, update to iPadOS 16.5 or later. For macOS versions prior to Ventura 13.4, update to macOS Ventura 13.4 or later.

**Name of the Vulnerable Software and Affected Versions** macOS Ventura versions prior to 13.3 macOS Monterey versions prior to 12.6.4 iOS versions prior to 16.4 iOS versions prior to 15.7.4 iPadOS versions prior to 16.4 iPadOS versions prior to 15.7.4 tvOS versions prior to 16.4 watchOS versions prior to 9.4 **Description** The issue allows a shortcut to use sensitive data with certain actions without prompting the user. This was addressed with additional permissions checks. **Recommendations** For macOS Ventura versions prior to 13.3, update to macOS Ventura 13.3. For macOS Monterey versions prior to 12.6.4, update to macOS Monterey 12.6.4. For iOS versions prior to 16.4, update to iOS 16.4. For iOS versions prior to 15.7.4, update to iOS 15.7.4. For iPadOS versions prior to 16.4, update to iPadOS 16.4. For iPadOS versions prior to 15.7.4, update to iPadOS 15.7.4. For tvOS versions prior to 16.4, update to tvOS 16.4. For watchOS versions prior to 9.4, update to watchOS 9.4.

**Name of the Vulnerable Software and Affected Versions** macOS Ventura versions prior to 13.2.1 **Description** The issue is related to insecure temporary files in the Shortcuts component of macOS Ventura, which may allow an attacker to access confidential information. This privacy issue can be exploited by an app to observe unprotected user data due to improper handling of temporary files. **Recommendations** For macOS Ventura versions prior to 13.2.1, update to version 13.2.1 to resolve the issue. As a temporary workaround, consider restricting access to sensitive data until the update is applied.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 10.14.6 Security Update versions prior to 2019-004 High Sierra Security Update versions prior to 2019-004 Sierra iOS versions prior to 12.4 tvOS versions prior to 12.4 **Description** A local user may be able to read a persistent account identifier. This issue was addressed with a new entitlement. **Recommendations** For macOS versions prior to 10.14.6, update to macOS Mojave 10.14.6. For Security Update versions prior to 2019-004 High Sierra, apply Security Update 2019-004. For Security Update versions prior to 2019-004 Sierra, apply Security Update 2019-004 Sierra. For iOS versions prior to 12.4, update to iOS 12.4. For tvOS versions prior to 12.4, update to tvOS 12.4.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.1 **Description** A device configuration issue was addressed with an updated configuration. This issue allows a device to be passively tracked by its Bluetooth MAC address. **Recommendations** For versions prior to 12.1, update to macOS Monterey 12.1 to resolve the issue. As a temporary workaround, consider restricting Bluetooth connectivity to minimize the risk of passive tracking.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 11.1 macOS Big Sur version 11.0.1 Security Update versions prior to 2020-001 Catalina Security Update versions prior to 2020-007 Mojave **Description** An out-of-bounds write issue was addressed with improved bounds checking, allowing an application to potentially execute arbitrary code with kernel privileges. **Recommendations** For macOS versions prior to 11.1, update to macOS Big Sur 11.1 or later. For macOS Big Sur version 11.0.1, update to macOS Big Sur 11.1 or later. For Security Update versions prior to 2020-001 Catalina, apply Security Update 2020-001 Catalina or later. For Security Update versions prior to 2020-007 Mojave, apply Security Update 2020-007 Mojave or later.

**Name of the Vulnerable Software and Affected Versions** Apple macOS versions prior to 11.1 Apple macOS versions prior to Security Update 2020-001 Catalina Apple macOS versions prior to Security Update 2020-007 Mojave Apple macOS version 11.0.1 **Description** An out-of-bounds write issue was addressed with improved bounds checking, allowing an application to potentially execute arbitrary code with kernel privileges. **Recommendations** For macOS Big Sur, update to version 11.1 or later. For macOS Catalina, apply Security Update 2020-001 or later. For macOS Mojave, apply Security Update 2020-007 or later. For macOS Big Sur 11.0.1, update to a newer version that includes the security fix.

**Name of the Vulnerable Software and Affected Versions** watchOS versions prior to 6.1.2 iOS versions prior to 13.3.1 iPadOS versions prior to 13.3.1 tvOS versions prior to 13.3.1 **Description** A memory corruption issue was addressed with improved memory handling, allowing an application to potentially execute arbitrary code with kernel privileges. **Recommendations** For watchOS versions prior to 6.1.2, update to watchOS 6.1.2 to resolve the issue. For iOS versions prior to 13.3.1, update to iOS 13.3.1 to resolve the issue. For iPadOS versions prior to 13.3.1, update to iPadOS 13.3.1 to resolve the issue. For tvOS versions prior to 13.3.1, update to tvOS 13.3.1 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS Catalina versions prior to 10.15.4 macOS Mojave versions prior to Security Update 2020-002 macOS High Sierra versions prior to Security Update 2020-002 **Description** A use after free issue was addressed with improved memory management, which may allow an application to gain elevated privileges. **Recommendations** For macOS Catalina versions prior to 10.15.4, update to macOS Catalina 10.15.4 or later. For macOS Mojave versions prior to Security Update 2020-002, apply Security Update 2020-002 or later. For macOS High Sierra versions prior to Security Update 2020-002, apply Security Update 2020-002 or later.

**Name of the Vulnerable Software and Affected Versions** watchOS versions prior to 5.2 iOS versions prior to 12.2 **Description** A permissions issue was addressed by removing vulnerable code and adding additional checks. A malicious application may be able to access restricted files. **Recommendations** For watchOS versions prior to 5.2, update to watchOS 5.2 to resolve the issue. For iOS versions prior to 12.2, update to iOS 12.2 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 13.6 iPadOS versions prior to 13.6 tvOS versions prior to 13.4.8 watchOS versions prior to 6.2.8 **Description** An authorization issue was addressed with improved state management. A malicious application may be able to read sensitive location information. **Recommendations** For iOS versions prior to 13.6, update to iOS 13.6 or later. For iPadOS versions prior to 13.6, update to iPadOS 13.6 or later. For tvOS versions prior to 13.4.8, update to tvOS 13.4.8 or later. For watchOS versions prior to 6.2.8, update to watchOS 6.2.8 or later.

**Name of the Vulnerable Software and Affected Versions** watchOS versions prior to 6.1.2 **Description** A memory corruption issue was addressed with improved state management, allowing an application to potentially execute arbitrary code with kernel privileges. **Recommendations** For versions prior to 6.1.2, update to watchOS 6.1.2 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 13.3.1 iPadOS versions prior to 13.3.1 **Description** A memory corruption issue was addressed with improved memory handling, allowing an application to potentially execute arbitrary code with kernel privileges. **Recommendations** For iOS versions prior to 13.3.1, update to iOS 13.3.1 to resolve the issue. For iPadOS versions prior to 13.3.1, update to iPadOS 13.3.1 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 12 macOS versions prior to 10.14 tvOS versions prior to 12 **Description** A validation issue existed in the entitlement verification, which has been addressed with improved validation of the process entitlement. **Recommendations** For iOS versions prior to 12, update to iOS 12 or later to resolve the issue. For macOS versions prior to 10.14, update to macOS 10.14 or later to resolve the issue. For tvOS versions prior to 12, update to tvOS 12 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 12 **Description** This issue was addressed with improved entitlements. **Recommendations** For versions prior to iOS 12, update to iOS 12 or later to resolve the issue.