Andrew Goldberg

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 17.2 iPadOS versions prior to 17.2 **Description** The issue allows an attacker with physical access to potentially use Siri to access sensitive user data. This is achieved through a lack of sufficient checks, which have been improved in the fixed versions. **Recommendations** For iOS versions prior to 17.2, update to iOS 17.2 to resolve the issue. For iPadOS versions prior to 17.2, update to iPadOS 17.2 to resolve the issue. As a temporary workaround, consider restricting access to Siri on affected devices until the update is applied.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 16 macOS versions prior to Ventura 13 watchOS versions prior to 9 **Description** A logic issue was addressed with improved state management. This issue allows a user with physical access to a device to potentially use Siri to obtain some call history information. **Recommendations** For iOS versions prior to 16, update to iOS 16 or later. For macOS versions prior to Ventura 13, update to macOS Ventura 13 or later. For watchOS versions prior to 9, update to watchOS 9 or later.

**Name of the Vulnerable Software and Affected Versions** watchOS versions prior to 8.5 iOS versions prior to 15.4 iPadOS versions prior to 15.4 macOS Big Sur versions prior to 11.6.5 macOS Monterey versions prior to 12.3 **Description** A permissions issue was addressed with improved validation, allowing a person with physical access to a device to potentially use Siri to obtain some location information from the lock screen. **Recommendations** For watchOS versions prior to 8.5, update to watchOS 8.5 to resolve the issue. For iOS versions prior to 15.4, update to iOS 15.4 to resolve the issue. For iPadOS versions prior to 15.4, update to iPadOS 15.4 to resolve the issue. For macOS Big Sur versions prior to 11.6.5, update to macOS Big Sur 11.6.5 to resolve the issue. For macOS Monterey versions prior to 12.3, update to macOS Monterey 12.3 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 14.0 iPadOS versions prior to 14.0 **Description** A lock screen issue allowed access to messages on a locked device. This issue was addressed with improved state management. A person with physical access to an iOS device may be able to view notification contents from the lockscreen. **Recommendations** For iOS versions prior to 14.0, update to iOS 14.0 or later to resolve the issue. For iPadOS versions prior to 14.0, update to iPadOS 14.0 or later to resolve the issue.