Biscuit

**Name of the Vulnerable Software and Affected Versions** macOS Ventura versions prior to 13.7.3 macOS Sequoia versions prior to 15.3 macOS Sonoma versions prior to 14.7.3 **Description** An access issue was addressed with additional sandbox restrictions. This issue allows an app to bypass Privacy preferences. The problem is related to insufficient access restrictions in the Launch Services interface of MacOS operating systems, which can be exploited to bypass security restrictions. **Recommendations** For macOS Ventura versions prior to 13.7.3, update to macOS Ventura 13.7.3 to resolve the issue. For macOS Sequoia versions prior to 15.3, update to macOS Sequoia 15.3 to resolve the issue. For macOS Sonoma versions prior to 14.7.3, update to macOS Sonoma 14.7.3 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iPadOS versions prior to 17.7.4 visionOS versions prior to 2.3 iOS versions prior to 18.3 iPadOS versions prior to 18.3 macOS Sequoia versions prior to 15.3 watchOS versions prior to 11.3 **Description** This issue is related to insufficient protection of service data in the Launch Services interface of MacOS, iOS, iPadOS, watchOS, and visionOS operating systems. The problem was solved with an improved redaction of sensitive information. An app may be able to fingerprint the user. **Recommendations** For iPadOS versions prior to 17.7.4, update to iPadOS 17.7.4 or later. For visionOS versions prior to 2.3, update to visionOS 2.3 or later. For iOS versions prior to 18.3, update to iOS 18.3 or later. For iPadOS versions prior to 18.3, update to iPadOS 18.3 or later. For macOS Sequoia versions prior to 15.3, update to macOS Sequoia 15.3 or later. For watchOS versions prior to 11.3, update to watchOS 11.3 or later.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 17.1 Apple iPadOS versions prior to 17.1 Apple macOS Sonoma versions prior to 14.1 Apple tvOS versions prior to 17.1 Apple watchOS versions prior to 10.1 **Description** A permissions issue was addressed with additional restrictions. This issue may allow an app to access sensitive user data. **Recommendations** For Apple iOS versions prior to 17.1, update to iOS 17.1 or later. For Apple iPadOS versions prior to 17.1, update to iPadOS 17.1 or later. For Apple macOS Sonoma versions prior to 14.1, update to macOS Sonoma 14.1 or later. For Apple tvOS versions prior to 17.1, update to tvOS 17.1 or later. For Apple watchOS versions prior to 10.1, update to watchOS 10.1 or later.

**Name of the Vulnerable Software and Affected Versions** tvOS versions prior to 17 iOS versions prior to 17 iPadOS versions prior to 17 watchOS versions prior to 10 macOS Sonoma versions prior to 14 **Description** A permissions issue was addressed with improved validation, which may have allowed an app to access sensitive user data. **Recommendations** For tvOS versions prior to 17, update to tvOS 17 to resolve the issue. For iOS versions prior to 17, update to iOS 17 to resolve the issue. For iPadOS versions prior to 17, update to iPadOS 17 to resolve the issue. For watchOS versions prior to 10, update to watchOS 10 to resolve the issue. For macOS Sonoma versions prior to 14, update to macOS Sonoma 14 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 15.7.2 iPadOS versions prior to 15.7.2 macOS Big Sur versions prior to 11.7.2 macOS Monterey versions prior to 12.6.2 macOS Ventura versions prior to 13.1 **Description** A logic issue was addressed with improved restrictions, which may allow an app to read sensitive location information without user consent. The issue is related to insufficient protection of service data in the Transparency, Consent and Control (TCC) subsystem of macOS, iOS, and iPadOS operating systems. This could enable an attacker to gain unauthorized access to protected information by tracking the user's location. **Recommendations** For iOS versions prior to 15.7.2, update to iOS 15.7.2 or later. For iPadOS versions prior to 15.7.2, update to iPadOS 15.7.2 or later. For macOS Big Sur versions prior to 11.7.2, update to macOS Big Sur 11.7.2 or later. For macOS Monterey versions prior to 12.6.2, update to macOS Monterey 12.6.2 or later. For macOS Ventura versions prior to 13.1, update to macOS Ventura 13.1 or later.