Hui Xue

The issue exists due to insufficient input validation in the PluginKit component of the iOS operating system. This allows a remote attacker to bypass the app review process and install arbitrary extensions using a specially crafted enterprise app.

The issue is related to insufficient access control in the SpringBoard component of the iOS operating system. This can be exploited by a remote attacker using a specially crafted application to spoof the dialog windows of arbitrary apps.

The issue is related to errors in security settings within the Application Store component. It allows remote attackers to cause a denial of service to an enterprise-signed app via a crafted ITMS URL.

The issue allows attackers to cause a denial of service, specifically an ID collision and launch outage, by utilizing a crafted universal provisioning profile app. This is due to the Application Store in Apple iOS not ensuring the uniqueness of bundle IDs.

The issue allows attackers to cause a denial of service, specifically an ID collision and Watch launch outage, by using a crafted universal provisioning profile app. This is due to the MobileInstallation component not ensuring the uniqueness of Watch bundle IDs.

The issue allows physically proximate attackers to discover passcodes by reading the lock screen during use of a Bluetooth keyboard, specifically exploiting the QuickType feature in the Keyboards subsystem.

The issue allows attackers to cause a denial of service, resulting in memory corruption and application crash, via a crafted configuration profile.

The issue is related to a type confusion problem in LaunchServices, allowing local users to gain privileges via a crafted localized string.

The issue concerns the app-installation functionality in MobileInstallation, allowing attackers to gain control of the local app container. This can be achieved by leveraging access to an enterprise distribution certificate for signing a crafted app.

The issue allows attackers to conduct user-action monitoring attacks against arbitrary apps via a crafted app that accesses an IOKit framework interface.