Adam Berry

**Name of the Vulnerable Software and Affected Versions** Firefox for iOS versions prior to 127 **Description** The issue is related to errors in presenting information to the user interface, potentially allowing a remote attacker to conduct a spoofing attack by replacing the URL in the location string. When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed app bundle after app termination. **Recommendations** For Firefox for iOS versions prior to 127, update to version 127 or later to resolve the issue. As a temporary workaround, consider restricting the use of private tabs until a patch is available. Avoid using the private browsing feature in affected versions to minimize the risk of data persistence.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 17.5 iPadOS versions prior to 17.5 macOS Sonoma versions prior to 14.5 **Description** The issue was addressed with improved memory handling. An app may be able to disclose kernel memory. **Recommendations** For iOS versions prior to 17.5, update to iOS 17.5 to resolve the issue. For iPadOS versions prior to 17.5, update to iPadOS 17.5 to resolve the issue. For macOS Sonoma versions prior to 14.5, update to macOS Sonoma 14.5 to resolve the issue.

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17.5 iPadOS versions prior to 17.5 Description: A privacy issue was addressed with improved handling of temporary files. This issue may allow an app to access Notes attachments, potentially revealing protected information. Recommendations: For iOS versions prior to 17.5, update to iOS 17.5 to resolve the issue. For iPadOS versions prior to 17.5, update to iPadOS 17.5 to resolve the issue.

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17.5 iPadOS versions prior to 17.5 Description: The issue is related to errors in security settings of the Notes component in iOS and iPadOS, allowing an attacker with physical access to the device to potentially access notes from the lock screen. This is achieved through improved state management. Recommendations: For iOS versions prior to 17.5, update to iOS 17.5 to resolve the issue. For iPadOS versions prior to 17.5, update to iPadOS 17.5 to resolve the issue.