Kenneth Chew

A logic issue existed due to insufficient validation, potentially allowing an application to bypass Gatekeeper security checks.

A logic issue was addressed with improved checks, allowing an attacker with physical access to potentially access contacts from the lock screen.

The issue is related to incorrect authorization in the State Management Handler component of iOS, iPadOS, macOS, watchOS, and the Safari browser. Exploitation of this issue may allow an attacker to access confidential information. The problem is associated with a lack of proper authentication, which can be exploited to access Private Browsing tabs without authentication.

An authentication issue was addressed with improved state management, allowing Private Browsing tabs to be accessed without authentication. The issue has been exploited publicly.