Phoenhex

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 10.14.5 **Description** A validation issue was addressed with improved input sanitization, allowing an application to potentially read restricted memory. **Recommendations** For versions prior to 10.14.5, update to macOS Mojave 10.14.5 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apple macOS versions prior to 10.14.5 **Description** A validation issue existed in the handling of symlinks, which has been addressed with improved validation. This could have allowed a local user to load unsigned kernel extensions, potentially leading to privilege escalation. **Recommendations** For versions prior to 10.14.5, update to macOS Mojave 10.14.5 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 12 tvOS versions prior to 12 watchOS versions prior to 5 Safari versions prior to 12 iTunes for Windows versions prior to 12.9 iCloud for Windows versions prior to 7.7 **Description** The issue is related to multiple memory corruption problems that were addressed with improved memory handling. **Recommendations** For iOS versions prior to 12, update to version 12 or later. For tvOS versions prior to 12, update to version 12 or later. For watchOS versions prior to 5, update to version 5 or later. For Safari versions prior to 12, update to version 12 or later. For iTunes for Windows versions prior to 12.9, update to version 12.9 or later. For iCloud for Windows versions prior to 7.7, update to version 7.7 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 10.12.5 **Description** The issue is related to the DiskArbitration component and involves a race condition that allows attackers to execute arbitrary code in a privileged context. This can be achieved via a specially crafted app, exploiting synchronization errors when using a shared resource. **Recommendations** For macOS versions prior to 10.12.5, update to version 10.12.5 or later to resolve the issue. As a temporary workaround, consider restricting the use of the DiskArbitration component until a patch is available.