Alexander Heinrich

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 18.4 visionOS versions prior to 2.4 iOS versions prior to 18.4 iPadOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 **Description** The issue allows an app to gain unauthorized access to the Local Network due to inadequate permissions checking. **Recommendations** For Safari versions prior to 18.4, update to Safari 18.4. For visionOS versions prior to 2.4, update to visionOS 2.4. For iOS versions prior to 18.4, update to iOS 18.4. For iPadOS versions prior to 18.4, update to iPadOS 18.4. For macOS Sequoia versions prior to 15.4, update to macOS Sequoia 15.4.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 18 iPadOS versions prior to 18 **Description** This issue allows an app to gain unauthorized access to the Local Network. The problem was addressed through improved state management. **Recommendations** For iOS versions prior to 18, update to iOS 18 to resolve the issue. For iPadOS versions prior to 18, update to iPadOS 18 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 13.7 iOS versions prior to 17.7 iPadOS versions prior to 17.7 visionOS versions prior to 2 macOS Sonoma versions prior to 14.7 macOS Sequoia versions prior to 15 **Description** A logic issue was addressed with improved checks, which may cause network traffic to leak outside a VPN tunnel, potentially leading to data exposure. **Recommendations** For macOS versions prior to 13.7, update to macOS Ventura 13.7 or later. For iOS versions prior to 17.7, update to iOS 17.7 or later. For iPadOS versions prior to 17.7, update to iPadOS 17.7 or later. For visionOS versions prior to 2, update to visionOS 2 or later. For macOS Sonoma versions prior to 14.7, update to macOS Sonoma 14.7 or later. For macOS Sequoia versions prior to 15, update to macOS Sequoia 15 or later.

**Name of the Vulnerable Software and Affected Versions** macOS Ventura versions prior to 13.7 iOS versions prior to 17.7 iPadOS versions prior to 17.7 visionOS versions prior to 2 watchOS versions prior to 11 macOS Sequoia versions prior to 15 iOS versions prior to 18 iPadOS versions prior to 18 macOS Sonoma versions prior to 14.7 tvOS versions prior to 18 **Description** The issue was addressed with improved memory handling. An app may be able to cause unexpected system termination. **Recommendations** For macOS Ventura versions prior to 13.7, update to macOS Ventura 13.7. For iOS versions prior to 17.7, update to iOS 17.7. For iPadOS versions prior to 17.7, update to iPadOS 17.7. For visionOS versions prior to 2, update to visionOS 2. For watchOS versions prior to 11, update to watchOS 11. For macOS Sequoia versions prior to 15, update to macOS Sequoia 15. For iOS versions prior to 18, update to iOS 18. For iPadOS versions prior to 18, update to iPadOS 18. For macOS Sonoma versions prior to 14.7, update to macOS Sonoma 14.7. For tvOS versions prior to 18, update to tvOS 18.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 17.7 iPadOS versions prior to 17.7 Xcode versions prior to 16 visionOS versions prior to 2 watchOS versions prior to 11 macOS Sequoia versions prior to 15 tvOS versions prior to 18 **Description** This issue allows an app to gain unauthorized access to Bluetooth due to inadequate state management. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited. **Recommendations** For iOS versions prior to 17.7, update to iOS 17.7 or later. For iPadOS versions prior to 17.7, update to iPadOS 17.7 or later. For Xcode versions prior to 16, update to Xcode 16 or later. For visionOS versions prior to 2, update to visionOS 2 or later. For watchOS versions prior to 11, update to watchOS 11 or later. For macOS Sequoia versions prior to 15, update to macOS Sequoia 15 or later. For tvOS versions prior to 18, update to tvOS 18 or later.

**Name of the Vulnerable Software and Affected Versions** macOS Catalina versions prior to 10.15.7 **Description** A file access issue existed with certain home folder files, allowing a malicious application to potentially read sensitive location information. This issue was addressed with improved access restrictions. **Recommendations** For macOS Catalina versions prior to 10.15.7, update to macOS Catalina 10.15.7 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 13.3.1 iPadOS versions prior to 13.3.1 **Description** This issue was addressed with improved setting propagation. Turning off "Load remote content in messages” may not apply to all mail previews. **Recommendations** For iOS versions prior to 13.3.1, update to iOS 13.3.1 to resolve the issue. For iPadOS versions prior to 13.3.1, update to iPadOS 13.3.1 to resolve the issue. As a temporary workaround, consider turning off "Load remote content in messages” to minimize the risk of exploitation.