Pattern-F

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 26.1 iPadOS versions prior to 26.1 macOS Sequoia versions prior to 15.7.2 macOS Sonoma versions prior to 14.8.2 visionOS versions prior to 26.1 **Description** An authorization issue exists due to improved state management. This can allow an application to access sensitive user data. **Recommendations** Update iOS to version 26.1. Update iPadOS to version 26.1. Update macOS Sequoia to version 15.7.2. Update macOS Sonoma to version 14.8.2. Update visionOS to version 26.1.

**Name of the Vulnerable Software and Affected Versions** macOS Sequoia versions prior to 15.3 tvOS versions prior to 18.3 watchOS versions prior to 11.3 iOS versions prior to 18.3 iPadOS versions prior to 18.3 **Description** A permissions issue was addressed with additional restrictions. A malicious app may be able to gain root privileges. The issue is related to errors in processing permissions in the Kernel component of MacOs, iPadOS, iOS, watchOS, and tvOS operating systems. **Recommendations** macOS Sequoia versions prior to 15.3: Update to macOS Sequoia 15.3 tvOS versions prior to 18.3: Update to tvOS 18.3 watchOS versions prior to 11.3: Update to watchOS 11.3 iOS versions prior to 18.3: Update to iOS 18.3 iPadOS versions prior to 18.3: Update to iPadOS 18.3

**Name of the Vulnerable Software and Affected Versions** Apple products versions prior to visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, and tvOS 18.3. **Description** A use-after-free issue exists in the Core Media component of Apple products. This issue allows a malicious application to potentially elevate privileges. Apple is aware of reports that this issue has been actively exploited against versions of iOS prior to iOS 17.2. The vulnerability has been actively exploited in the wild and is associated with a zero-day exploit. The exploit involves a malicious iMessage containing a specially crafted HEIF image, bypassing BlastDoor and triggering a WebKit remote code execution, potentially leading to unauthorized keychain access and network redirection. **Recommendations** Update to visionOS 2.3 or later. Update to iOS 18.3 or later. Update to iPadOS 18.3 or later. Update to macOS Sequoia 15.3 or later. Update to watchOS 11.3 or later. Update to tvOS 18.3 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 14.7.3 iOS versions prior to 18.3 iPadOS versions prior to 17.7.4 and prior to 18.3 watchOS versions prior to 11.3 tvOS versions prior to 18.3 visionOS versions prior to 2.3 **Description** The issue is related to incorrect code generation management in the kernel of macOS, iOS, iPadOS, watchOS, tvOS, and visionOS operating systems. Exploitation of this issue may allow an attacker to elevate their privileges and execute arbitrary code. An application may be able to execute arbitrary code with kernel privileges due to a validation issue that has been addressed with improved logic. **Recommendations** For macOS versions prior to 14.7.3, update to macOS Sonoma 14.7.3 or later. For iOS versions prior to 18.3, update to iOS 18.3 or later. For iPadOS versions prior to 17.7.4, update to iPadOS 17.7.4 or later, and for versions prior to 18.3, update to iPadOS 18.3 or later. For watchOS versions prior to 11.3, update to watchOS 11.3 or later. For tvOS versions prior to 18.3, update to tvOS 18.3 or later. For visionOS versions prior to 2.3, update to visionOS 2.3 or later.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 18.1 iPadOS versions prior to 18.1 visionOS versions prior to 2.1 macOS Sonoma versions prior to 14.7.1 watchOS versions prior to 11.1 tvOS versions prior to 18.1 **Description** The issue allows a malicious app to access private information due to improper handling of symlinks. **Recommendations** For iOS versions prior to 18.1, update to iOS 18.1 or later. For iPadOS versions prior to 18.1, update to iPadOS 18.1 or later. For visionOS versions prior to 2.1, update to visionOS 2.1 or later. For macOS Sonoma versions prior to 14.7.1, update to macOS Sonoma 14.7.1 or later. For watchOS versions prior to 11.1, update to watchOS 11.1 or later. For tvOS versions prior to 18.1, update to tvOS 18.1 or later.

**Name of the Vulnerable Software and Affected Versions** macOS Ventura versions prior to 13.6.7 macOS Monterey versions prior to 12.7.5 iOS versions prior to 16.7.8 iPadOS versions prior to 16.7.8 tvOS versions prior to 17.5 visionOS versions prior to 1.2 iOS versions prior to 17.5 iPadOS versions prior to 17.5 macOS Sonoma versions prior to 14.5 **Description** The issue allows an app to execute arbitrary code with kernel privileges due to inadequate checks. Improved checks have been implemented to address this issue. **Recommendations** For macOS Ventura versions prior to 13.6.7, update to macOS Ventura 13.6.7. For macOS Monterey versions prior to 12.7.5, update to macOS Monterey 12.7.5. For iOS versions prior to 16.7.8, update to iOS 16.7.8. For iPadOS versions prior to 16.7.8, update to iPadOS 16.7.8. For tvOS versions prior to 17.5, update to tvOS 17.5. For visionOS versions prior to 1.2, update to visionOS 1.2. For iOS versions prior to 17.5, update to iOS 17.5. For iPadOS versions prior to 17.5, update to iPadOS 17.5. For macOS Sonoma versions prior to 14.5, update to macOS Sonoma 14.5.

**Name of the Vulnerable Software and Affected Versions** watchOS versions prior to 9.6 macOS Monterey versions prior to 12.6.8 iOS versions prior to 15.7.8 iPadOS versions prior to 15.7.8 macOS Big Sur versions prior to 11.7.9 iOS versions prior to 16.6 iPadOS versions prior to 16.6 macOS Ventura versions prior to 13.5 **Description** The issue is related to improved memory handling, which may allow an app to execute arbitrary code with kernel privileges. This is due to a buffer overflow in the Neural Engine component of the operating systems. A remote attacker may be able to exploit this issue. **Recommendations** For watchOS versions prior to 9.6, update to watchOS 9.6. For macOS Monterey versions prior to 12.6.8, update to macOS Monterey 12.6.8. For iOS versions prior to 15.7.8, update to iOS 15.7.8. For iPadOS versions prior to 15.7.8, update to iPadOS 15.7.8. For macOS Big Sur versions prior to 11.7.9, update to macOS Big Sur 11.7.9. For iOS versions prior to 16.6, update to iOS 16.6. For iPadOS versions prior to 16.6, update to iPadOS 16.6. For macOS Ventura versions prior to 13.5, update to macOS Ventura 13.5.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 16.6 iPadOS versions prior to 16.6 macOS Ventura versions prior to 13.5 **Description** The issue is related to a buffer overflow in memory, allowing an app to potentially execute arbitrary code with kernel privileges. This is due to inadequate memory handling. **Recommendations** For iOS versions prior to 16.6, update to iOS 16.6 or later. For iPadOS versions prior to 16.6, update to iPadOS 16.6 or later. For macOS Ventura versions prior to 13.5, update to macOS Ventura 13.5 or later.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 16.2 iPadOS versions prior to 16.2 **Description** The issue was addressed with improved memory handling. An app may be able to break out of its sandbox. **Recommendations** For iOS versions prior to 16.2, update to iOS 16.2 or later to resolve the issue. For iPadOS versions prior to 16.2, update to iPadOS 16.2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 16.2 iPadOS versions prior to 16.2 macOS Monterey versions prior to 12.6.2 macOS Ventura versions prior to 13.1 iOS versions prior to 15.7.2 iPadOS versions prior to 15.7.2 **Description** The issue allows an app to potentially break out of its sandbox. This was addressed with improved checks. **Recommendations** For iOS versions prior to 16.2, update to iOS 16.2 or later. For iPadOS versions prior to 16.2, update to iPadOS 16.2 or later. For macOS Monterey versions prior to 12.6.2, update to macOS Monterey 12.6.2 or later. For macOS Ventura versions prior to 13.1, update to macOS Ventura 13.1 or later. For iOS versions prior to 15.7.2, update to iOS 15.7.2 or later. For iPadOS versions prior to 15.7.2, update to iPadOS 15.7.2 or later.

**Name of the Vulnerable Software and Affected Versions** Apple macOS versions prior to 11.7.2 Apple macOS versions prior to 12.6.2 Apple macOS versions prior to 13.1 Apple iOS versions prior to 16.2 Apple iPadOS versions prior to 16.2 Apple tvOS versions prior to 16.2 Apple watchOS versions prior to 9.2 **Description** The issue was addressed with improved memory handling. A remote user may be able to cause kernel code execution. **Recommendations** For macOS Big Sur, update to version 11.7.2 or later. For macOS Monterey, update to version 12.6.2 or later. For macOS Ventura, update to version 13.1 or later. For iOS, update to version 16.2 or later. For iPadOS, update to version 16.2 or later. For tvOS, update to version 16.2 or later. For watchOS, update to version 9.2 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 10.15.2 Security Update versions prior to 2019-002 Mojave Security Update versions prior to 2019-007 High Sierra **Description** A memory corruption issue was addressed with improved memory handling, allowing an application to potentially execute arbitrary code with kernel privileges. **Recommendations** For macOS versions prior to 10.15.2, update to macOS Catalina 10.15.2. For Security Update versions prior to 2019-002 Mojave, apply Security Update 2019-002 Mojave. For Security Update versions prior to 2019-007 High Sierra, apply Security Update 2019-007 High Sierra.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 13.4 iPadOS versions prior to 13.4 macOS Catalina versions prior to 10.15.4 tvOS versions prior to 13.4 watchOS versions prior to 6.2 **Description** A memory initialization issue was addressed with improved memory handling. This allows an application to potentially read restricted memory. **Recommendations** For iOS versions prior to 13.4, update to iOS 13.4 or later. For iPadOS versions prior to 13.4, update to iPadOS 13.4 or later. For macOS Catalina versions prior to 10.15.4, update to macOS Catalina 10.15.4 or later. For tvOS versions prior to 13.4, update to tvOS 13.4 or later. For watchOS versions prior to 6.2, update to watchOS 6.2 or later.