Wojciech Regula

An application may be able to access user-sensitive data due to improper handling of symlinks (symbolic links), which are files that point to another file or directory on the system.

An issue existed where an application could potentially access protected user data due to insufficient private data redaction in log entries.

An application could potentially access sensitive user data due to insufficient permissions checks. The issue was resolved by implementing additional permissions checks.

A flaw exists due to insufficient data redaction in logging mechanisms. This could allow an application to access sensitive user data.

A malicious application functioning as an HTTPS proxy could potentially gain access to sensitive user data due to insufficient access restrictions. The issue was resolved by enhancing access controls.

A permissions issue was addressed with additional restrictions. An app may be able to read a persistent device identifier.

A permissions issue was addressed with additional restrictions. This issue may allow an app to read sensitive location information.

A cookie management issue was addressed with improved state management. Cookies belonging to one origin may be sent to another origin.

A permissions issue allowed a malicious app with root privileges to potentially access keyboard input and location information without user consent.

The issue allows an app to potentially inherit Xcode permissions, enabling access to user data due to inadequate permissions checking.

A permissions issue was addressed with additional restrictions, which may have allowed an app to access a user's Photos Library.

A permissions issue was addressed with additional restrictions, which may have allowed an app to access protected user data.

The issue allows an app to bypass Privacy preferences. This was addressed through improved state management.

An app may be able to elevate privileges. This issue was addressed by removing the vulnerable code.

A logic issue was addressed with improved restrictions, which may have allowed an app to access user-sensitive data.

A privacy issue was addressed with improved private data redaction for log entries. A malicious app may be able to observe user data in log entries related to accessibility notifications.

This issue was addressed by removing the vulnerable code. Processing malicious input may lead to code execution.

The issue allows an app to potentially access sensitive user data due to inadequate validation of environment variables. This was addressed with improved validation.

The issue is related to insufficient protection of service data in the Find My component of macOS, iOS, iPadOS, and tvOS operating systems. Exploitation of this issue may allow an attacker to gain unauthorized access to protected information. An app may be able to read sensitive location information due to this issue.

This issue was addressed with improved validation of the process entitlement and Team ID. An app may be able to gain root privileges. The problem was solved by better checking the process entitlement and Team ID.