Bistrit Dahal

**Name of the Vulnerable Software and Affected Versions** watchOS versions prior to 11.2 iOS versions prior to 18.2 iPadOS versions prior to 18.2 **Description** The issue is related to insufficient protection of service data in the Face Gallery component of watchOS, iOS, and iPadOS operating systems. A system binary could be used to fingerprint a user's Apple Account, potentially allowing a remote attacker to disclose protected information. The problem was solved by removing the relevant flags. **Recommendations** For watchOS versions prior to 11.2, update to watchOS 11.2 to resolve the issue. For iOS versions prior to 18.2, update to iOS 18.2 to resolve the issue. For iPadOS versions prior to 18.2, update to iPadOS 18.2 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 18.1 iOS versions prior to 17.7.1 iPadOS versions prior to 18.1 iPadOS versions prior to 17.7.1 **Description** A logic issue was addressed with improved checks, allowing an attacker with physical access to potentially access contacts from the lock screen. **Recommendations** For iOS versions prior to 18.1, update to iOS 18.1 to resolve the issue. For iOS versions prior to 17.7.1, update to iOS 17.7.1 to resolve the issue. For iPadOS versions prior to 18.1, update to iPadOS 18.1 to resolve the issue. For iPadOS versions prior to 17.7.1, update to iPadOS 17.7.1 to resolve the issue.

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 11.2 visionOS versions prior to 2.2 tvOS versions prior to 18.2 macOS Sequoia versions prior to 15.2 iOS versions prior to 18.2 iPadOS versions prior to 18.2 Description: A permissions issue was addressed with additional restrictions. This issue may allow an app to access sensitive user data. Recommendations: For watchOS versions prior to 11.2, update to watchOS 11.2 to resolve the issue. For visionOS versions prior to 2.2, update to visionOS 2.2 to resolve the issue. For tvOS versions prior to 18.2, update to tvOS 18.2 to resolve the issue. For macOS Sequoia versions prior to 15.2, update to macOS Sequoia 15.2 to resolve the issue. For iOS versions prior to 18.2, update to iOS 18.2 to resolve the issue. For iPadOS versions prior to 18.2, update to iPadOS 18.2 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 18 iPadOS versions prior to 18 **Description** A permissions issue was addressed by removing vulnerable code and adding additional checks. Password autofill may fill in passwords after failing authentication. **Recommendations** For iOS versions prior to 18, update to iOS 18 to resolve the issue. For iPadOS versions prior to 18, update to iPadOS 18 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 18.0.1 iPadOS versions prior to 18.0.1 **Description** A logic issue was addressed with improved validation, allowing a user's saved passwords to be read aloud by VoiceOver. This issue is related to the VoiceOver feature in iOS and iPadOS, which could expose passwords. The flaw was reported by a researcher and has been resolved with improved validation. iPhone XS and later, plus iPads from the Pro, Air, and Mini series, are impacted. **Recommendations** Update to iOS 18.0.1 to fix the issue. Update to iPadOS 18.0.1 to fix the issue. As a temporary workaround, consider disabling the VoiceOver feature until a patch is available.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 18 iPadOS versions prior to 18 **Description** The issue allows an attacker with physical access to potentially access contacts from the lock screen due to inadequate checks. **Recommendations** For iOS versions prior to 18, update to iOS 18 to resolve the issue. For iPadOS versions prior to 18, update to iPadOS 18 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 17.7 iPadOS versions prior to 17.7 macOS Sequoia versions prior to 15 **Description** An issue allowed an attacker with physical access to a device to potentially read contact numbers from the lock screen. This was addressed by restricting options offered on a locked device. **Recommendations** For iOS versions prior to 17.7, update to iOS 17.7 or later. For iPadOS versions prior to 17.7, update to iPadOS 17.7 or later. For macOS Sequoia versions prior to 15, update to macOS Sequoia 15 or later.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 17.6 iPadOS versions prior to 17.6 iOS versions prior to 16.7.9 iPadOS versions prior to 16.7.9 macOS Ventura versions prior to 13.6.8 **Description** The issue allows an attacker to view sensitive user information. It was addressed through improved state management. **Recommendations** For iOS versions prior to 17.6, update to iOS 17.6 or later. For iPadOS versions prior to 17.6, update to iPadOS 17.6 or later. For iOS versions prior to 16.7.9, update to iOS 16.7.9 or later. For iPadOS versions prior to 16.7.9, update to iPadOS 16.7.9 or later. For macOS Ventura versions prior to 13.6.8, update to macOS Ventura 13.6.8 or later.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 16.7.9 Apple iPadOS versions prior to 16.7.9 Apple macOS Ventura versions prior to 13.6.8 Apple iOS versions prior to 17.6 Apple iPadOS versions prior to 17.6 Apple watchOS versions prior to 10.6 Apple macOS Sonoma versions prior to 14.6 **Description** This issue allows an attacker with physical access to potentially use Siri to access sensitive user data by exploiting options available on a locked device. The issue was addressed by restricting these options. **Recommendations** For Apple iOS versions prior to 16.7.9, update to iOS 16.7.9 or later. For Apple iPadOS versions prior to 16.7.9, update to iPadOS 16.7.9 or later. For Apple macOS Ventura versions prior to 13.6.8, update to macOS Ventura 13.6.8 or later. For Apple iOS versions prior to 17.6, update to iOS 17.6 or later. For Apple iPadOS versions prior to 17.6, update to iPadOS 17.6 or later. For Apple watchOS versions prior to 10.6, update to watchOS 10.6 or later. For Apple macOS Sonoma versions prior to 14.6, update to macOS Sonoma 14.6 or later.

**Name of the Vulnerable Software and Affected Versions** Apple tvOS versions prior to 17.4 Apple iOS versions prior to 17.4 Apple iPadOS versions prior to 17.4 Apple macOS Sonoma versions prior to 14.4 Apple watchOS versions prior to 10.4 **Description** This issue was addressed through improved state management. An attacker with physical access may be able to use Siri to access sensitive user data. **Recommendations** For Apple tvOS versions prior to 17.4, update to tvOS 17.4 to resolve the issue. For Apple iOS versions prior to 17.4, update to iOS 17.4 to resolve the issue. For Apple iPadOS versions prior to 17.4, update to iPadOS 17.4 to resolve the issue. For Apple macOS Sonoma versions prior to 14.4, update to macOS Sonoma 14.4 to resolve the issue. For Apple watchOS versions prior to 10.4, update to watchOS 10.4 to resolve the issue. As a temporary workaround, consider restricting access to Siri until a patch is available.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 14.1 watchOS versions prior to 10.1 iOS versions prior to 16.7.2 and prior to 17.1 iPadOS versions prior to 16.7.2 and prior to 17.1 **Description** This issue is related to insufficient access control in the Siri personal assistant for macOS, watchOS, iOS, and iPadOS operating systems. An attacker with physical access may be able to use Siri to access sensitive user data by exploiting the lack of proper restrictions on a locked device. **Recommendations** For macOS versions prior to 14.1, update to macOS Sonoma 14.1 to fix the issue. For watchOS versions prior to 10.1, update to watchOS 10.1 to fix the issue. For iOS versions prior to 16.7.2, update to iOS 16.7.2 to fix the issue. For iOS versions prior to 17.1, update to iOS 17.1 to fix the issue. For iPadOS versions prior to 16.7.2, update to iPadOS 16.7.2 to fix the issue. For iPadOS versions prior to 17.1, update to iPadOS 17.1 to fix the issue. As a temporary workaround, consider restricting the use of Siri on locked devices to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 14.1 iOS versions prior to 17.1 iPadOS versions prior to 17.1 **Description** The issue is related to an authentication problem in the Photos component of iOS, macOS, and iPadOS, which allows an attacker to view photos in the "Hidden Photos" album without authentication. This is due to a lack of authentication for a critical function. The estimated number of potentially affected devices is not specified. **Recommendations** For macOS versions prior to 14.1, update to macOS Sonoma 14.1 to resolve the issue. For iOS versions prior to 17.1, update to iOS 17.1 to resolve the issue. For iPadOS versions prior to 17.1, update to iPadOS 17.1 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 14.1 watchOS versions prior to 10.1 iOS versions prior to 16.7.2 and 17.1 iPadOS versions prior to 16.7.2 and 17.1 **Description** The issue is related to insufficient access control in the Siri personal assistant, which can allow an attacker with physical access to use Siri and gain unauthorized access to sensitive user data. This can be done by exploiting the lack of proper restrictions on options offered on a locked device. **Recommendations** For macOS versions prior to 14.1, update to macOS Sonoma 14.1 to fix the issue. For watchOS versions prior to 10.1, update to watchOS 10.1 to fix the issue. For iOS versions prior to 16.7.2, update to iOS 16.7.2 to fix the issue. For iOS versions prior to 17.1, update to iOS 17.1 to fix the issue. For iPadOS versions prior to 16.7.2, update to iPadOS 16.7.2 to fix the issue. For iPadOS versions prior to 17.1, update to iPadOS 17.1 to fix the issue.

**Name of the Vulnerable Software and Affected Versions** macOS Sonoma versions prior to 14.1 watchOS versions prior to 10.1 iOS versions prior to 17.1 iPadOS versions prior to 17.1 **Description** The issue is related to insufficient access control in the Siri personal assistant, which may allow an attacker with physical access to use Siri and access sensitive user data. This is possible due to the lack of proper restrictions on options offered on a locked device. **Recommendations** For macOS Sonoma versions prior to 14.1, update to version 14.1 to resolve the issue. For watchOS versions prior to 10.1, update to version 10.1 to resolve the issue. For iOS versions prior to 17.1, update to version 17.1 to resolve the issue. For iPadOS versions prior to 17.1, update to version 17.1 to resolve the issue. As a temporary workaround, consider restricting access to Siri on locked devices to minimize the risk of exploitation.