Yinyi Wu

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 18.1 iPadOS versions prior to 18.1 visionOS versions prior to 2.1 tvOS versions prior to 18.1 **Description** The issue was addressed with improved memory handling. An app may be able to cause unexpected system termination or corrupt kernel memory. **Recommendations** For iOS versions prior to 18.1, update to iOS 18.1 to resolve the issue. For iPadOS versions prior to 18.1, update to iPadOS 18.1 to resolve the issue. For visionOS versions prior to 2.1, update to visionOS 2.1 to resolve the issue. For tvOS versions prior to 18.1, update to tvOS 18.1 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 15.7.1 Apple iOS version 16.1 and earlier Apple iPadOS versions prior to 15.7.1 Apple iPadOS version 16.1 and earlier **Description** The issue is related to an out-of-bounds write vulnerability that may allow an attacker to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited. The estimated number of potentially affected devices is not specified. **Recommendations** For Apple iOS versions prior to 15.7.1, update to iOS 15.7.1 or later. For Apple iOS version 16.1 and earlier, update to iOS 16.1 or later. For Apple iPadOS versions prior to 15.7.1, update to iPadOS 15.7.1 or later. For Apple iPadOS version 16.1 and earlier, update to iPadOS 16.1 or later.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 15.7.1 iPadOS versions prior to 15.7.1 tvOS versions prior to 16.1 iOS versions prior to 16.1 iPadOS versions prior to 16 macOS Ventura versions prior to 13 **Description** The issue was addressed with improved memory handling. Processing a maliciously crafted USD file may disclose memory contents. **Recommendations** For iOS versions prior to 15.7.1, update to iOS 15.7.1 or later. For iPadOS versions prior to 15.7.1, update to iPadOS 15.7.1 or later. For tvOS versions prior to 16.1, update to tvOS 16.1 or later. For iOS versions prior to 16.1, update to iOS 16.1 or later. For iPadOS versions prior to 16, update to iPadOS 16 or later. For macOS Ventura versions prior to 13, update to macOS Ventura 13 or later.

**Name of the Vulnerable Software and Affected Versions** Apple tvOS versions prior to 16 Apple iOS versions prior to 16 Apple watchOS versions prior to 9 **Description** The issue allows an app to potentially execute arbitrary code with kernel privileges due to insufficient checks. **Recommendations** For Apple tvOS versions prior to 16, update to tvOS 16 to resolve the issue. For Apple iOS versions prior to 16, update to iOS 16 to resolve the issue. For Apple watchOS versions prior to 9, update to watchOS 9 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.5 macOS Big Sur versions prior to 11.6.8 Security Update versions prior to 2022-005 Catalina **Description** The issue was addressed with improved memory handling. An app may be able to execute arbitrary code with kernel privileges. **Recommendations** For macOS versions prior to 12.5, update to macOS Monterey 12.5. For macOS Big Sur versions prior to 11.6.8, update to macOS Big Sur 11.6.8. For Security Update versions prior to 2022-005 Catalina, apply Security Update 2022-005 Catalina.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 11.6.1 **Description** The issue involves multiple out-of-bounds write problems that have been resolved through enhanced bounds checking. A malicious application could potentially execute arbitrary code with kernel privileges. **Recommendations** For versions prior to 11.6.1, update to macOS Big Sur 11.6.1 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 14.8 iPadOS versions prior to 14.8 tvOS versions prior to 15 watchOS versions prior to 8 iOS versions prior to 15 iPadOS versions prior to 15 **Description** A type confusion issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to arbitrary code execution. **Recommendations** For iOS versions prior to 14.8, update to iOS 14.8 or later. For iPadOS versions prior to 14.8, update to iPadOS 14.8 or later. For tvOS versions prior to 15, update to tvOS 15 or later. For watchOS versions prior to 8, update to watchOS 8 or later. For iOS versions prior to 15, update to iOS 15 or later. For iPadOS versions prior to 15, update to iPadOS 15 or later.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 14.8.1 Apple iOS versions prior to 15.1 Apple iPadOS versions prior to 14.8.1 Apple iPadOS versions prior to 15.1 **Description** An out-of-bounds write issue was addressed with improved bounds checking, which may allow a malicious application to execute arbitrary code with kernel privileges. **Recommendations** For Apple iOS versions prior to 14.8.1, update to iOS 14.8.1 or later. For Apple iOS versions prior to 15.1, update to iOS 15.1 or later. For Apple iPadOS versions prior to 14.8.1, update to iPadOS 14.8.1 or later. For Apple iPadOS versions prior to 15.1, update to iPadOS 15.1 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.0.1 macOS Big Sur versions prior to 11.6.1 Security Update versions prior to 2021-007 Catalina **Description** The issue involves multiple out-of-bounds write problems that have been resolved through enhanced bounds checking. A malicious application could potentially execute arbitrary code with kernel privileges. **Recommendations** For macOS versions prior to 12.0.1, update to macOS Monterey 12.0.1. For macOS Big Sur versions prior to 11.6.1, update to macOS Big Sur 11.6.1. For Security Update versions prior to 2021-007 Catalina, apply Security Update 2021-007 Catalina.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 11.5 Security Update versions prior to 2021-004 on Catalina Security Update versions prior to 2021-005 on Mojave **Description** The issue allows an application to potentially cause unexpected system termination or write kernel memory due to an out-of-bounds write privilege escalation. This could be exploited through the `process token BindQueryStoreRegisterToMemoryList` function. **Recommendations** For macOS versions prior to 11.5, update to macOS Big Sur 11.5. For Catalina, apply Security Update 2021-004. For Mojave, apply Security Update 2021-005.

**Name of the Vulnerable Software and Affected Versions** macOS Big Sur versions prior to 11.5 Security Update versions prior to 2021-004 Catalina Security Update versions prior to 2021-005 Mojave **Description** The issue involves an out-of-bounds write that has been addressed through improved input validation. This allows an application to potentially execute arbitrary code with kernel privileges. **Recommendations** For macOS Big Sur versions prior to 11.5, update to macOS Big Sur 11.5. For Security Update versions prior to 2021-004 Catalina, apply Security Update 2021-004 Catalina. For Security Update versions prior to 2021-005 Mojave, apply Security Update 2021-005 Mojave.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to Big Sur 11.4 Security Update versions prior to 2021-003 Catalina Security Update versions prior to 2021-004 Mojave **Description** A malicious application may be able to execute arbitrary code with kernel privileges due to an out-of-bounds write issue. This issue was addressed with improved bounds checking. **Recommendations** For macOS versions prior to Big Sur 11.4, update to macOS Big Sur 11.4 or later. For Security Update versions prior to 2021-003 Catalina, apply Security Update 2021-003 Catalina or later. For Security Update versions prior to 2021-004 Mojave, apply Security Update 2021-004 Mojave or later.