Hunter Byrnes

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 11.4 macOS versions prior to 10.13.5 tvOS versions prior to 11.4 watchOS versions prior to 4.3.1 **Description** The issue involves the UIKit component and allows remote attackers to cause a denial of service via a crafted text file. **Recommendations** For iOS versions prior to 11.4, update to version 11.4 or later. For macOS versions prior to 10.13.5, update to version 10.13.5 or later. For tvOS versions prior to 11.4, update to version 11.4 or later. For watchOS versions prior to 4.3.1, update to version 4.3.1 or later.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 11.4 **Description** An issue in certain Apple products allows physically proximate attackers to discover private contact information via the `Siri Contacts` component. **Recommendations** For iOS versions prior to 11.4, update to version 11.4 or later to resolve the issue. As a temporary workaround, consider disabling the `Siri Contacts` component until a patch is available.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 11.4 **Description** The issue involves the `Siri` component and allows physically proximate attackers to bypass the lock-screen protection mechanism, obtaining private notification content via `Siri`. **Recommendations** For iOS versions prior to 11.4, update to version 11.4 or later to resolve the issue. As a temporary workaround, consider disabling the `Siri` feature when the device is locked to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 10.3 **Description** The issue is related to the Siri component in the iOS operating system and involves a lack of protection for certain data. It allows an attacker with local access to read text messages on the lock screen via unspecified vectors. **Recommendations** For iOS versions prior to 10.3, consider disabling the Siri feature on the lock screen as a temporary workaround to minimize the risk of exploitation. Restrict access to the lock screen to prevent physically proximate attackers from reading text messages. At the moment, there is no information about a newer version that contains a fix for this vulnerability.