Ian Miers

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 9.3 Apple OS X versions prior to 10.11.4 Apple watchOS versions prior to 2.2 **Description** The issue is related to the incorrect operation of a cryptographic protection mechanism in the operating systems. This could allow a remote attacker to influence the confidentiality of protected information. The problem arises from the improper implementation of a cryptographic protection mechanism, which enables remote attackers to read message attachments through vectors related to duplicate messages. **Recommendations** For Apple iOS versions prior to 9.3, update to version 9.3 or later to resolve the issue. For Apple OS X versions prior to 10.11.4, update to version 10.11.4 or later to resolve the issue. For Apple watchOS versions prior to 2.2, update to version 2.2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 9.3 **Description** The issue exists due to insufficient input validation in the Messages component of the iOS operating system. It can be exploited by a remote attacker using a specially crafted SMS message with a URL to obtain confidential information. **Recommendations** For versions prior to 9.3, update to version 9.3 or later to resolve the issue.