Fmyy

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 15.6 **Description** A permissions issue was addressed with additional sandbox restrictions. A sandboxed process may be able to circumvent sandbox restrictions. **Recommendations** Update to macOS version 15.6.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 130.0.6723.58 **Description** The issue is related to a use-after-free vulnerability in the user interface of Google Chrome on iOS. This vulnerability can be exploited by a remote attacker who convinces a user to engage in specific UI gestures, potentially allowing the attacker to exploit heap corruption via a crafted HTML page. The estimated severity of this issue is medium. **Recommendations** For Google Chrome versions prior to 130.0.6723.58, update to version 130.0.6723.58 or later to resolve the issue. As a temporary workaround, consider avoiding the use of specific UI gestures that may trigger the vulnerability until a patch is applied. Restrict access to crafted HTML pages to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 130.0.6723.58 Microsoft Edge (affected versions not specified) **Description** The issue is related to a use after free in ParcelTracking, which can be exploited by a remote attacker who convinces a user to engage in specific UI gestures, potentially leading to heap corruption via a crafted HTML page. This could impact the confidentiality, integrity, and availability of protected information. **Recommendations** For Google Chrome versions prior to 130.0.6723.58, update to version 130.0.6723.58 or later to resolve the issue. For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 126.0.6478.182 Microsoft Edge (affected versions not specified) **Description** The issue is related to a use after free vulnerability in the Screen Capture function, which can be exploited by a remote attacker using a crafted HTML page. This could potentially lead to heap corruption, allowing the attacker to gain unauthorized access to protected information, execute arbitrary code, or cause a denial of service. The attacker must convince a user to engage in specific UI gestures to exploit the vulnerability. **Recommendations** For Google Chrome versions prior to 126.0.6478.182, update to version 126.0.6478.182 or later to resolve the issue. For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the Screen Capture function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 126.0.6478.182 Microsoft Edge (affected versions not specified) **Description** The issue is related to a use after free vulnerability in the Audio component of Google Chrome and Microsoft Edge browsers. This vulnerability can be exploited by a remote attacker using a specially crafted HTML page, potentially allowing them to access protected information, execute arbitrary code, or cause a denial of service by exploiting heap corruption. **Recommendations** For Google Chrome versions prior to 126.0.6478.182, update to version 126.0.6478.182 or later to resolve the issue. For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** macOS Sonoma versions prior to 14.3 watchOS versions prior to 10.3 tvOS versions prior to 17.3 iOS versions prior to 17.3 iPadOS versions prior to 17.3 **Description** The issue is related to improved memory handling and may allow an app to execute arbitrary code with kernel privileges. This is due to a buffer overflow in the kernel of Mac OS, tvOS, watchOS, iOS, and iPadOS, which can be exploited to elevate privileges, execute arbitrary code, or cause a denial of service. **Recommendations** For macOS Sonoma versions prior to 14.3, update to macOS Sonoma 14.3 or later. For watchOS versions prior to 10.3, update to watchOS 10.3 or later. For tvOS versions prior to 17.3, update to tvOS 17.3 or later. For iOS versions prior to 17.3, update to iOS 17.3 or later. For iPadOS versions prior to 17.3, update to iPadOS 17.3 or later.