Joshua Jewett

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.7.5 macOS Ventura versions prior to 13.6.5 macOS Sonoma versions prior to 14.4 **Description** A malicious application may be able to access Find My data due to an issue with sensitive information redaction. This issue has been addressed with improved redaction of sensitive information. **Recommendations** For macOS versions prior to 12.7.5, update to macOS Monterey 12.7.5 or later. For macOS Ventura versions prior to 13.6.5, update to macOS Ventura 13.6.5 or later. For macOS Sonoma versions prior to 14.4, update to macOS Sonoma 14.4 or later.

**Name of the Vulnerable Software and Affected Versions** macOS Sonoma versions prior to 14.4 iOS versions prior to 17.4 iPadOS versions prior to 17.4 **Description** A privacy issue was addressed by not logging contents of text fields, which could allow an app to view Mail data. **Recommendations** For macOS Sonoma versions prior to 14.4, update to macOS Sonoma 14.4 to resolve the issue. For iOS versions prior to 17.4, update to iOS 17.4 to resolve the issue. For iPadOS versions prior to 17.4, update to iPadOS 17.4 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS Sonoma versions prior to 14.4 **Description** The issue allows an app to potentially access user-sensitive data. This was addressed by removing additional entitlements. **Recommendations** For versions prior to 14.4, update to macOS Sonoma 14.4 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS Sonoma versions prior to 14.4 **Description** The issue allows an app to potentially access sensitive user data due to inadequate state management. This has been addressed with improved state management. **Recommendations** For macOS Sonoma versions prior to 14.4, update to macOS Sonoma 14.4 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS Sonoma versions prior to 14.2 **Description** This issue allows Remote Login sessions to potentially obtain full disk access permissions due to inadequate state management. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incidents where this issue was exploited. **Recommendations** For macOS Sonoma versions prior to 14.2, update to macOS Sonoma 14.2 to resolve the issue. As a temporary workaround, consider restricting Remote Login sessions to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 13.6.5 macOS versions prior to 12.7.4 **Description** The issue was addressed with improved restriction of data container access. An app may be able to access sensitive user data. **Recommendations** For macOS versions prior to 13.6.5, update to macOS Ventura 13.6.5. For macOS versions prior to 12.7.4, update to macOS Monterey 12.7.4.

**Name of the Vulnerable Software and Affected Versions** watchOS versions prior to 10 iPadOS versions prior to 17 macOS versions prior to Sonoma 14 iOS versions prior to 17 **Description** The issue is related to a lack of protection for service data in the TCC component of the mentioned operating systems. This could allow an attacker to disclose protected information. An app may be able to access user-sensitive data due to this issue. **Recommendations** For watchOS versions prior to 10, update to watchOS 10 or later. For iPadOS versions prior to 17, update to iPadOS 17 or later. For macOS versions prior to Sonoma 14, update to macOS Sonoma 14 or later. For iOS versions prior to 17, update to iOS 17 or later.