Dayton Pidhirney

**Name of the Vulnerable Software and Affected Versions** macOS Sonoma versions prior to 14.7.6 iPadOS versions prior to 17.7.7 iOS versions prior to 18.5 iPadOS versions prior to 18.5 visionOS versions prior to 2.5 macOS Ventura versions prior to 13.7.6 macOS Sequoia versions prior to 15.4 **Description** The issue allows an attacker to turn on sharing of an iCloud folder without authentication. This was addressed with additional entitlement checks. **Recommendations** For macOS Sonoma versions prior to 14.7.6, update to version 14.7.6. For iPadOS versions prior to 17.7.7, update to version 17.7.7. For iOS versions prior to 18.5, update to version 18.5. For iPadOS versions prior to 18.5, update to version 18.5. For visionOS versions prior to 2.5, update to version 2.5. For macOS Ventura versions prior to 13.7.6, update to version 13.7.6. For macOS Sequoia versions prior to 15.4, update to version 15.4.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 10.15.4 Security Update versions prior to 2020-002 Mojave Security Update versions prior to 2020-002 High Sierra **Description** The issue allows an application to potentially trigger a sysdiagnose. This was addressed with improved checks. **Recommendations** For macOS versions prior to 10.15.4, update to macOS Catalina 10.15.4 or later. For Security Update versions prior to 2020-002 Mojave, apply Security Update 2020-002 or later. For Security Update versions prior to 2020-002 High Sierra, apply Security Update 2020-002 or later.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 13.3.1 iPadOS versions prior to 13.3.1 macOS Catalina versions prior to 10.15.3 tvOS versions prior to 13.3.1 watchOS versions prior to 6.1.2 **Description** The issue allows an application to potentially execute arbitrary code with system privileges due to inadequate permissions logic. **Recommendations** For iOS versions prior to 13.3.1, update to iOS 13.3.1 or later. For iPadOS versions prior to 13.3.1, update to iPadOS 13.3.1 or later. For macOS Catalina versions prior to 10.15.3, update to macOS Catalina 10.15.3 or later. For tvOS versions prior to 13.3.1, update to tvOS 13.3.1 or later. For watchOS versions prior to 6.1.2, update to watchOS 6.1.2 or later.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 12.3 macOS Mojave versions prior to 10.14.5 tvOS versions prior to 12.3 watchOS versions prior to 5.2.1 **Description** A memory corruption issue was addressed with improved memory handling, allowing an application to potentially execute arbitrary code with system privileges. **Recommendations** For iOS versions prior to 12.3, update to iOS 12.3 or later. For macOS Mojave versions prior to 10.14.5, update to macOS Mojave 10.14.5 or later. For tvOS versions prior to 12.3, update to tvOS 12.3 or later. For watchOS versions prior to 5.2.1, update to watchOS 5.2.1 or later.