Guilherme Rambo

An authorization issue exists due to improper state management, which could allow an application to access sensitive user data.

An application may be able to fingerprint a user due to improved redaction of sensitive information.

The issue allows an app to access sensitive user data. This was addressed through improved state management.

An app could impersonate system notifications, and sensitive notifications now require restricted entitlements. This issue could allow an app to cause a denial-of-service. The vulnerability exploits the Darwin notification system’s lack of sender verification.

A privacy issue was addressed by removing sensitive data. An attacker may be able to determine the Apple ID of the owner of the computer.

An access issue was addressed with improved access restrictions, which may allow an app to access Bluetooth-connected microphones without user permission.

An app may be able to spoof system notifications and UI. This issue was addressed with additional entitlement checks.

A permissions issue was addressed with improved validation, which may allow an app to read sensitive location information.

A permissions issue was addressed with improved validation, which may have allowed an app to access a user's Safari history.

A permissions issue was addressed with improved validation, which may have allowed an app to access user-sensitive data.

The issue allows an app to potentially read a persistent device identifier. This was addressed with improved entitlements.

The issue allowed apps with Bluetooth access to record audio using connected AirPods, potentially capturing conversations with Siri and background sound. This was possible due to a problem with Core Bluetooth and the DoAP service, which supports Siri and Dictation on AirPods. The issue did not require the app to request microphone access permission and would not leave any traces of microphone eavesdropping. The vulnerability could be exploited to bypass the Transparency, Consent and Control (TCC) security system in macOS, allowing any app to record Siri conversations without requesting permissions.

An access issue was addressed with additional sandbox restrictions on third-party apps. This issue allows an app to potentially record audio with paired AirPods.

The issue allows an app to potentially spoof system notifications and UI. This was addressed with a new entitlement.