Adriatik Raci

An issue with app access to camera metadata was addressed with improved logic. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, visionOS 26.5. An app may be able to capture a user's screen.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 17 iPadOS versions prior to 17 watchOS versions prior to 10 iOS versions prior to 16.7 iPadOS versions prior to 16.7 macOS Sonoma versions prior to 14 **Description** The issue allows an app to identify what other apps a user has installed. This is due to a lack of protection for service data in the Safari browser of watchOS, iPadOS, macOS, and iOS operating systems. The issue was addressed with improved checks. **Recommendations** For iOS versions prior to 17, update to iOS 17 or later. For iPadOS versions prior to 17, update to iPadOS 17 or later. For watchOS versions prior to 10, update to watchOS 10 or later. For iOS versions prior to 16.7, update to iOS 16.7 or later. For iPadOS versions prior to 16.7, update to iPadOS 16.7 or later. For macOS Sonoma versions prior to 14, update to macOS Sonoma 14 or later.

**Name of the Vulnerable Software and Affected Versions** watchOS versions prior to 9.3 tvOS versions prior to 16.3 macOS Ventura versions prior to 13.2 iOS versions prior to 16.3 iPadOS versions prior to 16.3 **Description** The issue was addressed with improved handling of caches. Visiting a website may lead to an app denial-of-service. **Recommendations** For watchOS versions prior to 9.3, update to watchOS 9.3 to resolve the issue. For tvOS versions prior to 16.3, update to tvOS 16.3 to resolve the issue. For macOS Ventura versions prior to 13.2, update to macOS Ventura 13.2 to resolve the issue. For iOS versions prior to 16.3, update to iOS 16.3 to resolve the issue. For iPadOS versions prior to 16.3, update to iPadOS 16.3 to resolve the issue.