Skr0X1C0

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 15.6 Apple iPadOS versions prior to 15.6 Apple tvOS versions prior to 15.6 Apple watchOS versions prior to 8.7 **Description** A race condition issue was addressed through improved state handling, which could allow an app with arbitrary kernel read and write capability to bypass Pointer Authentication. **Recommendations** For iOS versions prior to 15.6, update to iOS 15.6 to resolve the issue. For iPadOS versions prior to 15.6, update to iPadOS 15.6 to resolve the issue. For tvOS versions prior to 15.6, update to tvOS 15.6 to resolve the issue. For watchOS versions prior to 8.7, update to watchOS 8.7 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.5 **Description** A memory corruption issue was addressed with improved state management, allowing an app to potentially execute arbitrary code with kernel privileges. **Recommendations** For versions prior to 12.5, update to macOS Monterey 12.5 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.5 **Description** An out-of-bounds write issue was addressed with improved input validation, which may allow an app to gain elevated privileges. **Recommendations** For versions prior to 12.5, update to macOS Monterey 12.5 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.5 Security Update 2022-005 Catalina is also a fixed version, implying that versions prior to this update are affected. **Description** An out-of-bounds read issue was addressed with improved bounds checking. A user in a privileged network position may be able to leak sensitive information. **Recommendations** For versions prior to macOS 12.5, update to macOS 12.5 or apply Security Update 2022-005 Catalina to resolve the issue. At the moment, there is no information about additional mitigation measures for this issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.5 **Description** The issue was addressed with improved memory handling. An app may be able to leak sensitive kernel state. **Recommendations** For versions prior to 12.5, update to macOS Monterey 12.5 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to Monterey 12.5 macOS Catalina versions prior to Security Update 2022-005 **Description** An out-of-bounds read issue was addressed with improved input validation, which may allow an app to gain elevated privileges. **Recommendations** For macOS Catalina, apply Security Update 2022-005 to resolve the issue. For macOS Monterey, update to version 12.5 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** OX App Suite versions prior to 7.10.4 **Description** The issue allows for Server-Side Request Forgery (SSRF) via the /ajax/messaging/message API endpoint. This could potentially be exploited to access internal resources. **Recommendations** For OX App Suite versions prior to 7.10.4, update to version 7.10.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the /ajax/messaging/message API endpoint until a patch is available.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 13.5 iPadOS versions prior to 13.5 macOS Catalina versions prior to 10.15.5 **Description** An access issue was addressed with additional sandbox restrictions. A malicious application may be able to bypass Privacy preferences. **Recommendations** For iOS versions prior to 13.5, update to iOS 13.5 or later. For iPadOS versions prior to 13.5, update to iPadOS 13.5 or later. For macOS Catalina versions prior to 10.15.5, update to macOS Catalina 10.15.5 or later.