Joshua Jewett

قد يتمكن تطبيق من الوصول إلى بيانات المستخدم الحساسة بسبب وجود صلاحيات (entitlements) إضافية. الصلاحيات هي أذونات خاصة تُمنح للتطبيق للوصول إلى موارد محمية أو ميزات النظام.

A privacy issue was addressed by not logging contents of text fields, which could allow an app to view Mail data.

A malicious application may be able to access Find My data due to an issue with sensitive information redaction. This issue has been addressed with improved redaction of sensitive information.

The issue allows an app to potentially access user-sensitive data. This was addressed by removing additional entitlements.

The issue allows an app to potentially access sensitive user data due to inadequate state management. This has been addressed with improved state management.

This issue allows Remote Login sessions to potentially obtain full disk access permissions due to inadequate state management. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incidents where this issue was exploited.

The issue was addressed with improved restriction of data container access. An app may be able to access sensitive user data.

The issue is related to a lack of protection for service data in the TCC component of the mentioned operating systems. This could allow an attacker to disclose protected information. An app may be able to access user-sensitive data due to this issue.