Nikias Bassen

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 14.0 iPadOS versions prior to 14.0 tvOS versions prior to 14.0 watchOS versions prior to 7.0 Xcode versions prior to 12.0 **Description** The issue allows an attacker in a privileged network position to execute arbitrary code on a paired device during a debug session over the network. This was addressed by encrypting communications over the network to devices running the specified operating systems. **Recommendations** For iOS versions prior to 14.0, update to iOS 14.0 or later to resolve the issue. For iPadOS versions prior to 14.0, update to iPadOS 14.0 or later to resolve the issue. For tvOS versions prior to 14.0, update to tvOS 14.0 or later to resolve the issue. For watchOS versions prior to 7.0, update to watchOS 7.0 or later to resolve the issue. For Xcode versions prior to 12.0, update to Xcode 12.0 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apple OS X versions prior to 10.11.3 **Description** The issue is related to an untrusted search path vulnerability in the OSA Scripts component of Apple OS X. This vulnerability allows attackers to load arbitrary script libraries via a quarantined application, potentially enabling remote attackers to exploit the system. **Recommendations** For Apple OS X versions prior to 10.11.3, update to version 10.11.3 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 9.2.1 Apple OS X versions prior to 10.11.3 Apple tvOS versions prior to 9.1.1 **Description** The issue is related to the syslog component in the affected operating systems, caused by a buffer overflow. This can be exploited by a local attacker to gain privileges or cause a denial of service, resulting in memory corruption. **Recommendations** For Apple iOS versions prior to 9.2.1, update to version 9.2.1 or later. For Apple OS X versions prior to 10.11.3, update to version 10.11.3 or later. For Apple tvOS versions prior to 9.1.1, update to version 9.1.1 or later.