Allison Husain

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 10.15.1 Security Update versions prior to 2019-001 and 2019-006 iOS versions prior to 12.4.3 and 13.2 watchOS versions prior to 6.1 iPadOS versions prior to 13.2 **Description** A logic issue was addressed with improved validation. AirDrop transfers may be unexpectedly accepted while in Everyone mode. **Recommendations** For macOS versions prior to 10.15.1, update to macOS Catalina 10.15.1 or apply Security Update 2019-001 or Security Update 2019-006. For iOS versions prior to 12.4.3, update to iOS 12.4.3. For iOS versions prior to 13.2, update to iOS 13.2. For watchOS versions prior to 6.1, update to watchOS 6.1. For iPadOS versions prior to 13.2, update to iPadOS 13.2.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 10.15.2 Security Update 2019-002 Mojave versions prior to the update Security Update 2019-007 High Sierra versions prior to the update **Description** A parsing issue in the handling of directory paths was addressed with improved path validation. A remote attacker may be able to overwrite existing files. **Recommendations** For macOS versions prior to 10.15.2, update to macOS Catalina 10.15.2. For Security Update 2019-002 Mojave, apply the security update. For Security Update 2019-007 High Sierra, apply the security update.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 13.4 iPadOS versions prior to 13.4 macOS Catalina versions prior to 10.15.4 tvOS versions prior to 13.4 watchOS versions prior to 6.2 **Description** A logic issue was addressed with improved restrictions. A sandboxed process may be able to circumvent sandbox restrictions. **Recommendations** For iOS versions prior to 13.4, update to iOS 13.4 or later. For iPadOS versions prior to 13.4, update to iPadOS 13.4 or later. For macOS Catalina versions prior to 10.15.4, update to macOS Catalina 10.15.4 or later. For tvOS versions prior to 13.4, update to tvOS 13.4 or later. For watchOS versions prior to 6.2, update to watchOS 6.2 or later.