Asaf Cohen

Server-side request forgery (ssrf) in Azure DevOps Server allows an authorized attacker to disclose information over a network.

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27. An app may be able to access sensitive user data.

A privacy issue exists where sensitive data is stored in a manner that may allow an app to fingerprint the user. Fingerprinting is a technique used to uniquely identify a device or user based on specific characteristics.

An information disclosure issue exists where an app may be able to access sensitive user data. This was addressed by implementing improved privacy controls.

A null pointer dereference occurs due to insufficient input validation, which may allow an application to cause unexpected system termination. A null pointer dereference is a condition where a program attempts to read or write to a memory address that is null, typically leading to a crash.

A permissions issue exists where an application may be able to access protected user data.

A permissions issue exists where an app may be able to bypass certain Privacy preferences.

An issue existed with how temporary files were handled, potentially allowing an application to access user-sensitive data.

A logging issue allowed an application to potentially access sensitive user data due to insufficient data redaction.

A privacy issue existed due to improper handling of temporary files. This allowed an application to potentially access user-sensitive data.

A logging issue allowed potential viewing of sensitive user information due to insufficient data redaction.

An issue exists where an application may be able to access sensitive user data due to improved handling of temporary files.