Noah Roskin-Frazee

**Nome do software vulnerável e versões afetadas** Versões do macOS Sonoma anteriores à 14.3 Versões do watchOS anteriores à 10.3 Versões do tvOS anteriores à 17.3 Versões do iOS anteriores à 17.3 Versões do iPadOS anteriores à 17.3 **Descrição** O problema está relacionado ao tratamento de arquivos temporários, o que pode permitir que um aplicativo acesse dados confidenciais do usuário. Isso poderia potencialmente contornar restrições de segurança e levar ao acesso não autorizado a informações protegidas. **Recomendações** Para versões do macOS Sonoma anteriores à 14.3, atualize para a versão 14.3 ou posterior. Para versões do watchOS anteriores à 10.3, atualize para a versão 10.3 ou posterior. Para versões do tvOS anteriores à 17.3, atualize para a versão 17.3 ou posterior. Para versões do iOS anteriores à 17.3, atualize para a versão 17.3 ou posterior. Para versões do iPadOS anteriores à 17.3, atualize para a versão 17.3 ou posterior.

**Nome do software vulnerável e versões afetadas** Versões do macOS Sonoma anteriores à 14.3 Versões do watchOS anteriores à 10.3 Versões do tvOS anteriores à 17.3 Versões do iOS anteriores à 17.3 Versões do iPadOS anteriores à 17.3 **Descrição** Este problema foi resolvido com o aprimoramento da ocultação de informações confidenciais. Um aplicativo pode ser capaz de visualizar o número de telefone de um usuário nos logs do sistema. **Recomendações** Para versões do macOS Sonoma anteriores à 14.3, atualize para o macOS Sonoma 14.3. Para versões do watchOS anteriores à 10.3, atualize para o watchOS 10.3. Para versões do tvOS anteriores à 17.3, atualize para o tvOS 17.3. Para versões do iOS anteriores à 17.3, atualize para o iOS 17.3. Para versões do iPadOS anteriores à 17.3, atualize para o iPadOS 17.3.

**Nome do software vulnerável e versões afetadas** Versões do macOS anteriores à 14.3 **Descrição** O problema está relacionado a um estouro de buffer no componente LLVM do sistema operacional macOS, o que pode levar à execução de código arbitrário durante o processamento de conteúdo da web. Isso pode ser explorado por um invasor remoto. **Recomendações** Para versões anteriores à 14.3, atualize para o macOS Sonoma 14.3 para corrigir o problema com um gerenciamento de memória aprimorado.

**Nome do software vulnerável e versões afetadas** Versões do macOS Sonoma anteriores à 14.3 Versões do watchOS anteriores à 10.3 Versões do tvOS anteriores à 17.3 Versões do iOS anteriores à 17.3 Versões do iPadOS anteriores à 17.3 **Descrição** Foi corrigido um problema de privacidade relacionado ao tratamento aprimorado de arquivos, que poderia permitir que um aplicativo acessasse dados confidenciais do usuário. O problema está relacionado à validação insuficiente de entradas na interface NSSpellChecker dos sistemas operacionais macOS, tvOS, watchOS, iOS e iPadOS, podendo permitir que um invasor obtenha acesso não autorizado a informações protegidas. **Recomendações** Para versões do macOS Sonoma anteriores à 14.3, atualize para a versão 14.3 ou posterior. Para versões do watchOS anteriores à 10.3, atualize para a versão 10.3 ou posterior. Para versões do tvOS anteriores à 17.3, atualize para a versão 17.3 ou posterior. Para versões do iOS anteriores à 17.3, atualize para a versão 17.3 ou posterior. Para versões do iPadOS anteriores à 17.3, atualize para a versão 17.3 ou posterior.

**Nome do software vulnerável e versões afetadas** Versões do watchOS anteriores à 10.3 Versões do iOS anteriores à 17.3 Versões do iPadOS anteriores à 17.3 Versões do macOS Sonoma anteriores à 14.3 Versões do macOS Ventura anteriores à 13.6.4 Versões do macOS Monterey anteriores à 12.7.3 **Descrição** O problema está relacionado ao componente Mail Search e envolve a divulgação de informações por meio de arquivos de registro. Um aplicativo pode conseguir acessar dados confidenciais do usuário. O número estimado de dispositivos potencialmente afetados não foi especificado. **Recomendações** Para versões do watchOS anteriores à 10.3, atualize para o watchOS 10.3 para resolver o problema. Para versões do iOS anteriores à 17.3, atualize para o iOS 17.3 para resolver o problema. Para versões do iPadOS anteriores à 17.3, atualize para o iPadOS 17.3 para resolver o problema. Para versões do macOS Sonoma anteriores à 14.3, atualize para o macOS Sonoma 14.3 para resolver o problema. Para versões do macOS Ventura anteriores à 13.6.4, atualize para o macOS Ventura 13.6.4 para resolver o problema. Para versões do macOS Monterey anteriores à 12.7.3, atualize para o macOS Monterey 12.7.3 para resolver o problema.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 16.7.5 iPadOS versions prior to 16.7.5 watchOS versions prior to 10.2 macOS Ventura versions prior to 13.6.4 macOS Sonoma versions prior to 14.2 macOS Monterey versions prior to 12.7.3 iOS versions prior to 17.2 iPadOS versions prior to 17.2 **Description** A privacy issue was addressed with improved private data redaction for log entries. This issue may allow an app to access sensitive user data. **Recommendations** For iOS versions prior to 16.7.5, update to iOS 16.7.5 or later. For iPadOS versions prior to 16.7.5, update to iPadOS 16.7.5 or later. For watchOS versions prior to 10.2, update to watchOS 10.2 or later. For macOS Ventura versions prior to 13.6.4, update to macOS Ventura 13.6.4 or later. For macOS Sonoma versions prior to 14.2, update to macOS Sonoma 14.2 or later. For macOS Monterey versions prior to 12.7.3, update to macOS Monterey 12.7.3 or later. For iOS versions prior to 17.2, update to iOS 17.2 or later. For iPadOS versions prior to 17.2, update to iPadOS 17.2 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 14.2 macOS Ventura versions prior to 13.6.3 macOS Monterey versions prior to 12.7.2 **Description** The issue is related to insufficient protection of registration data in the AppleEvents component of macOS, which may allow an unauthorized access to protected information. An app may be able to access information about a user's contacts. This issue was addressed with improved redaction of sensitive information. **Recommendations** For macOS versions prior to 14.2, update to macOS Sonoma 14.2. For macOS Ventura versions prior to 13.6.3, update to macOS Ventura 13.6.3. For macOS Monterey versions prior to 12.7.2, update to macOS Monterey 12.7.2.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 14.1 iOS versions prior to 17.1 iPadOS versions prior to 17.1 **Description** A privacy issue is related to insufficient protection of registration data in the Contacts component of iOS, macOS, and iPadOS operating systems. This issue may allow an attacker to disclose protected information. The problem is associated with inadequate private data redaction for log entries, potentially enabling an app to access sensitive user data. **Recommendations** For macOS versions prior to 14.1, update to macOS Sonoma 14.1 to resolve the issue. For iOS versions prior to 17.1, update to iOS 17.1 to resolve the issue. For iPadOS versions prior to 17.1, update to iPadOS 17.1 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.7.1 macOS versions prior to 13.6.1 macOS versions prior to 14.1 **Description** A permissions issue was addressed with additional restrictions, which may allow an app to access sensitive user data. The issue is related to insufficient access control in the Mac OS operating system, potentially allowing a remote attacker to disclose protected information. **Recommendations** For macOS versions prior to 12.7.1, update to macOS Monterey 12.7.1 to resolve the issue. For macOS versions prior to 13.6.1, update to macOS Ventura 13.6.1 to resolve the issue. For macOS versions prior to 14.1, update to macOS Sonoma 14.1 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.7.1 macOS versions prior to 13.6.1 macOS versions prior to 14.1 **Description** The issue exists due to insufficient input validation in a component of the macOS operating system, specifically the File Provider. This can be exploited to cause a denial-of-service to Endpoint Security clients. An app may be able to cause this denial-of-service. **Recommendations** For macOS versions prior to 12.7.1, update to macOS Monterey 12.7.1 to resolve the issue. For macOS versions prior to 13.6.1, update to macOS Ventura 13.6.1 to resolve the issue. For macOS versions prior to 14.1, update to macOS Sonoma 14.1 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS Sonoma versions prior to 14.1 **Description** A permissions issue was addressed with additional restrictions. This issue may allow an app to access user-sensitive data. The vulnerability is related to insufficient access restrictions in the AppSandbox component of the macOS operating system, which could allow an attacker to execute arbitrary commands. **Recommendations** For macOS Sonoma versions prior to 14.1, update to macOS Sonoma 14.1 to resolve the issue. As a temporary workaround, consider restricting access to sensitive user data until the update is applied.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 14 **Description** The issue is related to a lack of protection for service data in the FileProvider component of the macOS operating system. This may allow an attacker to disclose protected information. An app may be able to access user-sensitive data. The issue was addressed with improved data protection. **Recommendations** For versions prior to 14, update to macOS Sonoma 14 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 14 **Description** This issue concerns a shortcut that may output sensitive user data without consent. The problem was addressed by adding an additional prompt for user consent. **Recommendations** For versions prior to 14, update to macOS Sonoma 14 to resolve the issue. As a temporary workaround, consider restricting the use of shortcuts that may output sensitive user data until the update is applied.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 17 iPadOS versions prior to 17 macOS versions prior to Sonoma 14 **Description** A permissions issue was addressed with additional restrictions. This issue allows an app to potentially bypass Privacy preferences. **Recommendations** For iOS versions prior to 17, update to iOS 17 to resolve the issue. For iPadOS versions prior to 17, update to iPadOS 17 to resolve the issue. For macOS versions prior to Sonoma 14, update to macOS Sonoma 14 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** tvOS versions prior to 17 iOS versions prior to 17 iPadOS versions prior to 17 watchOS versions prior to 10 macOS versions prior to Sonoma 14 **Description** A privacy issue was addressed with improved private data redaction for log entries. An app may be able to read sensitive location information. **Recommendations** For tvOS versions prior to 17, update to tvOS 17 to resolve the issue. For iOS versions prior to 17, update to iOS 17 to resolve the issue. For iPadOS versions prior to 17, update to iPadOS 17 to resolve the issue. For watchOS versions prior to 10, update to watchOS 10 to resolve the issue. For macOS versions prior to Sonoma 14, update to macOS Sonoma 14 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 13.5 **Description** The issue is related to insufficient access control in the Voice Memos component of the macOS operating system. It may allow an attacker to gain unauthorized access to sensitive information. The estimated number of potentially affected devices is not specified. **Recommendations** For versions prior to 13.5, update to macOS Ventura 13.5 to resolve the issue. As a temporary workaround, consider restricting access to sensitive user data until the update is applied.

**Name of the Vulnerable Software and Affected Versions** macOS Monterey versions prior to 12.6.8 iOS versions prior to 16.6 iPadOS versions prior to 16.6 macOS Big Sur versions prior to 11.7.9 macOS Ventura versions prior to 13.5 watchOS versions prior to 9.6 **Description** A logic issue was addressed with improved checks, which may allow an app to cause a denial-of-service. The issue is related to errors in processing input data in the libxpc library of the affected operating systems. **Recommendations** For macOS Monterey versions prior to 12.6.8, update to macOS Monterey 12.6.8. For iOS versions prior to 16.6, update to iOS 16.6. For iPadOS versions prior to 16.6, update to iPadOS 16.6. For macOS Big Sur versions prior to 11.7.9, update to macOS Big Sur 11.7.9. For macOS Ventura versions prior to 13.5, update to macOS Ventura 13.5. For watchOS versions prior to 9.6, update to watchOS 9.6.