Josh Parnham

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 18.3 macOS Sequoia versions prior to 15.3 **Description** A logging issue exists where insufficient data redaction in registration log files allows for information disclosure. A malicious application can exploit this to bypass browser extension authentication and enumerate a user's saved account data within the Passwords component, bypassing TCC (Transparency, Consent, and Control) protections. **Recommendations** Update Safari to version 18.3. Update macOS Sequoia to version 15.3.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to Big Sur 11.4 Security Update 2021-003 Catalina versions prior to the fixed version **Description** An access issue was addressed with improved access restrictions, allowing a malicious application to potentially access a user's call history. **Recommendations** For macOS versions prior to Big Sur 11.4, update to macOS Big Sur 11.4 to resolve the issue. For Security Update 2021-003 Catalina, apply Security Update 2021-003 Catalina to fix the issue.

**Name of the Vulnerable Software and Affected Versions** macOS Big Sur version 11.0.1 and earlier iOS versions prior to 14.0 iPadOS versions prior to 14.0 **Description** A validation issue existed in the entitlement verification, which was addressed with improved validation of the process entitlement. This issue allowed a malicious application to determine a user's open tabs in Safari. **Recommendations** For macOS Big Sur versions prior to 11.0.1, update to version 11.0.1 or later. For iOS versions prior to 14.0, update to version 14.0 or later. For iPadOS versions prior to 14.0, update to version 14.0 or later.