Mohammad Ghasemisharif

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 15.7.1 iOS versions prior to 16.1 iPadOS versions prior to 15.7.1 iPadOS versions prior to 16 watchOS versions prior to 9.1 **Description** A logic issue was addressed with improved state management. Visiting a maliciously crafted website may leak sensitive data. **Recommendations** For iOS versions prior to 15.7.1, update to iOS 15.7.1 or later. For iOS versions prior to 16.1, update to iOS 16.1 or later. For iPadOS versions prior to 15.7.1, update to iPadOS 15.7.1 or later. For iPadOS versions prior to 16, update to iPadOS 16 or later. For watchOS versions prior to 9.1, update to watchOS 9.1 or later.

**Name of the Vulnerable Software and Affected Versions** macOS Monterey versions prior to 12.5 **Description** An information disclosure issue was addressed by removing the vulnerable code. This issue allows a website to track the websites a user visited in Safari private browsing mode. **Recommendations** For macOS Monterey versions prior to 12.5, update to macOS Monterey 12.5 to resolve the issue. As a temporary workaround, consider restricting the use of Safari private browsing mode until the update is applied.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 11 Safari versions prior to 11 **Description** The issue involves the WebKit component and allows remote attackers to track Safari Private Browsing users by leveraging cookie mishandling. **Recommendations** For iOS versions prior to 11, update to version 11 or later to resolve the issue. For Safari versions prior to 11, update to version 11 or later to resolve the issue.