Tongxin Li

The issue allows attackers to bypass private-storage file-access restrictions via a crafted application that changes a symlink target. This can be demonstrated by obtaining Signature or SignatureOrSystem access. The vulnerability exists due to insufficient checking of the state of a shared resource, which can be exploited by a local attacker to bypass existing restrictions on access to private files using a specially crafted application that changes a link.

The issue is related to improper interaction between Keychain Access and Keychain Agent. This allows attackers to spoof the Keychain Server, potentially enabling remote attackers to substitute the Keychain Server.

The issue is related to improper validation of iCloud keychain item ACLs in the Apple Online Store Kit. This allows attackers to obtain access to keychain items via a crafted app. The vulnerability can be exploited by a remote attacker using a specially formed application to gain access to keychain item management.

The issue is related to a lack of protection for service data in the iOS operating system. It allows a remote attacker to obtain sensitive information about inter-app communication via a crafted app that conducts an interception attack. The attack involves an unspecified URL scheme and can provide access to protected information.

The issue is related to the Bluetooth subsystem, which does not properly restrict access to certain data. This allows attackers to read Notification Center notifications of paired devices using a crafted app. The estimated number of potentially affected devices and details about real-world incidents are not provided.