Siguza

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.3 iOS versions prior to 14.5 iPadOS versions prior to 14.5 watchOS versions prior to 7.4 tvOS versions prior to 14.5 Description: The issue concerns a problem in code signature validation that has been addressed with improved checks. A malicious application may be able to bypass Privacy preferences. Recommendations: For macOS versions prior to 11.3, update to macOS Big Sur 11.3. For iOS versions prior to 14.5, update to iOS 14.5. For iPadOS versions prior to 14.5, update to iPadOS 14.5. For watchOS versions prior to 7.4, update to watchOS 7.4. For tvOS versions prior to 14.5, update to tvOS 14.5.

A malicious application may be able to determine kernel memory layout due to an issue with permissions logic.

The issue involves the `IOHIDFamily` component and allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

The issue is caused by a memory corruption vulnerability in the WebKit component of Apple iOS, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. This can be achieved by exploiting a buffer overflow in memory.

The issue is related to insufficient access control in the kernel of the iOS operating system. It can be exploited to execute arbitrary code in a privileged context or cause a denial of service, such as memory corruption, by using a specially crafted app.

The issue is related to the kernel in Apple iOS, which lacks protection for sensitive data. This allows attackers to obtain sensitive information from memory via a crafted app.