风沐云烟

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 15.6 macOS versions prior to 14.7.7 macOS versions prior to 13.7.7 **Description** An issue existed in the handling of environment variables. The issue was addressed with improved validation. An app may be able to access sensitive user data. **Recommendations** Update to macOS version 15.6 or later. Update to macOS version 14.7.7 or later. Update to macOS version 13.7.7 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 15.6 **Description** A permissions issue was addressed with additional sandbox restrictions. A sandboxed process may be able to circumvent sandbox restrictions. **Recommendations** Update to macOS version 15.6.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to Sonoma 14.7.7 macOS versions prior to Ventura 13.7.7 macOS versions prior to Sequoia 15.6 **Description** The issue was addressed by removing the vulnerable code. Running an `hdiutil` command may unexpectedly execute arbitrary code. **Recommendations** Update to macOS Sonoma 14.7.7 or later. Update to macOS Ventura 13.7.7 or later. Update to macOS Sequoia 15.6 or later.

**Name of the Vulnerable Software and Affected Versions** iPadOS versions prior to 17.7.3 watchOS versions prior to 11.2 tvOS versions prior to 18.2 macOS Sequoia versions prior to 15.2 iOS versions prior to 18.2 iPadOS versions prior to 18.2 macOS Ventura versions prior to 13.7.2 macOS Sonoma versions prior to 14.7.2 **Description** A logic issue was addressed with improved checks, which may have allowed an app to gain elevated privileges. **Recommendations** For iPadOS versions prior to 17.7.3, update to iPadOS 17.7.3 or later. For watchOS versions prior to 11.2, update to watchOS 11.2 or later. For tvOS versions prior to 18.2, update to tvOS 18.2 or later. For macOS Sequoia versions prior to 15.2, update to macOS Sequoia 15.2 or later. For iOS versions prior to 18.2, update to iOS 18.2 or later. For iPadOS versions prior to 18.2, update to iPadOS 18.2 or later. For macOS Ventura versions prior to 13.7.2, update to macOS Ventura 13.7.2 or later. For macOS Sonoma versions prior to 14.7.2, update to macOS Sonoma 14.7.2 or later.

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 11.2 tvOS versions prior to 18.2 macOS Sequoia versions prior to 15.2 iOS versions prior to 18.2 iPadOS versions prior to 18.2 macOS Ventura versions prior to 13.7.2 macOS Sonoma versions prior to 14.7.2 Description: The issue was addressed with improved checks. An app may be able to break out of its sandbox. Recommendations: For watchOS versions prior to 11.2, update to watchOS 11.2 or later. For tvOS versions prior to 18.2, update to tvOS 18.2 or later. For macOS Sequoia versions prior to 15.2, update to macOS Sequoia 15.2 or later. For iOS versions prior to 18.2, update to iOS 18.2 or later. For iPadOS versions prior to 18.2, update to iPadOS 18.2 or later. For macOS Ventura versions prior to 13.7.2, update to macOS Ventura 13.7.2 or later. For macOS Sonoma versions prior to 14.7.2, update to macOS Sonoma 14.7.2 or later.