Ian Beer

A race condition was addressed with additional validation. This issue may allow an app to execute arbitrary code with kernel privileges.

A logic issue was addressed with improved checks, allowing an app to potentially execute arbitrary code with kernel privileges.

The issue allows an app to potentially execute arbitrary code with kernel privileges due to a problem that was addressed with improved memory handling.

A memory corruption issue was addressed with improved state management. This issue may allow a malicious application to execute arbitrary code with kernel privileges.

The issue is related to a buffer overflow in the kernel of the operating systems, which can allow an attacker to elevate their privileges. This can potentially enable an application to execute arbitrary code with kernel privileges.

A logic issue was addressed with improved state management. This issue may lead to a denial of service when processing a maliciously crafted message. The vulnerability is caused by a logic error during the authentication procedure, which can be exploited by a remote attacker to cause a denial of service.

A type confusion issue in the XNU kernel of Apple iOS and macOS allows a malicious application to execute arbitrary code with kernel privileges. This issue is reportedly being exploited in the wild, with threat actors using it to deliver malware to users in Hong Kong. The vulnerability can be exploited by running a specially crafted application, allowing an attacker to gain elevated privileges or execute arbitrary code.

A memory corruption issue allows an application to potentially execute arbitrary code with kernel privileges. The issue was addressed by removing the vulnerable code.

An information disclosure issue was addressed by removing the vulnerable code. This issue allows an application to potentially execute arbitrary code with kernel privileges.

A memory corruption issue was addressed with improved input validation. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.

A double free issue was addressed with improved memory management. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory. The issue could have allowed remote attackers to gain complete control over targeted iPhones.

The issue is related to a memory corruption vulnerability in the Mail client of iOS, iPadOS, and watchOS operating systems. It occurs when processing malicious email messages, allowing a remote attacker to cause a denial of service due to a buffer overflow in memory. The vulnerability can be exploited by processing a maliciously crafted mail message, which may lead to heap corruption.

A memory corruption issue was addressed with improved input validation. This issue allows a remote attacker to cause unexpected system termination or corrupt kernel memory. The issue is related to a wifi proximity kernel double-free vulnerability in AWDL BSS Steering. A proof of concept exploit has been demonstrated, showing the ability to remotely dump memory over the air with no user interaction.

A memory corruption issue was addressed with improved input validation. Processing a maliciously crafted string may lead to heap corruption.

The issue is related to an out-of-bounds read that has been addressed with improved bounds checking. This could allow an application to gain elevated privileges.

A memory corruption issue was addressed with improved memory handling, which may allow an application to execute arbitrary code with system privileges.

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 12 Apple macOS versions prior to 10.14 Apple tvOS versions prior to 12 Apple watchOS versions prior to 5 Description: A memory corruption issue was addressed with improved input validation. Recommendations: For iOS versions prior to 12, update to iOS 12 or later. For macOS versions prior to 10.14, update to macOS Mojave 10.14 or later. For tvOS versions prior to 12, update to tvOS 12 or later. For watchOS versions prior to 5, update to watchOS 5 or later.

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 12.1.1 macOS Mojave versions prior to 10.14.2 tvOS versions prior to 12.1.1 watchOS versions prior to 5.1.2 Description: A memory corruption issue was addressed with improved input validation. Recommendations: For iOS versions prior to 12.1.1, update to iOS 12.1.1 or later. For macOS Mojave versions prior to 10.14.2, update to macOS Mojave 10.14.2 or later. For tvOS versions prior to 12.1.1, update to tvOS 12.1.1 or later. For watchOS versions prior to 5.1.2, update to watchOS 5.1.2 or later.

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 12 macOS versions prior to 10.14 tvOS versions prior to 12 watchOS versions prior to 5 Description: A memory corruption issue was addressed with improved memory handling. Recommendations: For iOS versions prior to 12, update to iOS 12 or later. For macOS versions prior to 10.14, update to macOS Mojave 10.14 or later. For tvOS versions prior to 12, update to tvOS 12 or later. For watchOS versions prior to 5, update to watchOS 5 or later.

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 12 macOS versions prior to 10.14 tvOS versions prior to 12 watchOS versions prior to 5 Description: A memory corruption issue was addressed with improved memory handling. Recommendations: For iOS versions prior to 12, update to iOS 12 or later. For macOS versions prior to 10.14, update to macOS Mojave 10.14 or later. For tvOS versions prior to 12, update to tvOS 12 or later. For watchOS versions prior to 5, update to watchOS 5 or later.