Min Zheng

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 15.6 iPadOS versions prior to 15.6 macOS Monterey versions prior to 12.5 **Description** The issue allows an app to potentially execute arbitrary code with kernel privileges due to insufficient checks. This could lead to unauthorized access and control of the system. **Recommendations** For iOS versions prior to 15.6, update to iOS 15.6 or later. For iPadOS versions prior to 15.6, update to iPadOS 15.6 or later. For macOS Monterey versions prior to 12.5, update to macOS Monterey 12.5 or later.

**Name of the Vulnerable Software and Affected Versions** watchOS versions prior to 6.1.2 iOS versions prior to 13.3.1 iPadOS versions prior to 13.3.1 tvOS versions prior to 13.3.1 **Description** A memory corruption issue was addressed with improved memory handling, allowing an application to potentially execute arbitrary code with kernel privileges. **Recommendations** For watchOS versions prior to 6.1.2, update to watchOS 6.1.2 to resolve the issue. For iOS versions prior to 13.3.1, update to iOS 13.3.1 to resolve the issue. For iPadOS versions prior to 13.3.1, update to iPadOS 13.3.1 to resolve the issue. For tvOS versions prior to 13.3.1, update to tvOS 13.3.1 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** watchOS versions prior to 6.1.2 **Description** A memory corruption issue was addressed with improved state management, allowing an application to potentially execute arbitrary code with kernel privileges. **Recommendations** For versions prior to 6.1.2, update to watchOS 6.1.2 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 12 **Description** This issue was addressed with improved entitlements. **Recommendations** For versions prior to iOS 12, update to iOS 12 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 9 **Description** The issue is related to insufficient access control in the SpringBoard component of the iOS operating system. This can be exploited by a remote attacker using a specially crafted application to spoof the dialog windows of arbitrary apps. **Recommendations** For versions prior to 9, update to a version 9 or later to resolve the issue. As a temporary workaround, consider restricting the installation of untrusted or third-party applications to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 7.1 **Description** The issue allows attackers to conduct user-action monitoring attacks against arbitrary apps via a crafted app that accesses an IOKit framework interface. **Recommendations** For versions prior to 7.1, update to version 7.1 or later to resolve the issue.