Xiaofeng Wang

This issue was addressed with improved setting propagation. An attacker in a privileged network position may be able to unexpectedly alter application state.

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 11 Description: An issue in certain Apple products involves the `Sandbox Profiles` component, allowing attackers to determine whether arbitrary files exist via a crafted app. Recommendations: For iOS versions prior to 11, update to a version 11 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 11 macOS versions prior to 10.13 tvOS versions prior to 11 watchOS versions prior to 4 Description: The issue involves the Kernel component and allows attackers to obtain sensitive network-activity information about arbitrary apps via a crafted app. Recommendations: For iOS versions prior to 11, update to version 11 or later. For macOS versions prior to 10.13, update to version 10.13 or later. For tvOS versions prior to 11, update to version 11 or later. For watchOS versions prior to 4, update to version 4 or later.

The issue involves the Kernel component and allows attackers to monitor arbitrary apps via a crafted app that accesses process information at a high rate.

The issue allows attackers to bypass private-storage file-access restrictions via a crafted application that changes a symlink target. This can be demonstrated by obtaining Signature or SignatureOrSystem access. The vulnerability exists due to insufficient checking of the state of a shared resource, which can be exploited by a local attacker to bypass existing restrictions on access to private files using a specially crafted application that changes a link.

The issue is related to improper interaction between Keychain Access and Keychain Agent. This allows attackers to spoof the Keychain Server, potentially enabling remote attackers to substitute the Keychain Server.

The issue is related to improper validation of iCloud keychain item ACLs in the Apple Online Store Kit. This allows attackers to obtain access to keychain items via a crafted app. The vulnerability can be exploited by a remote attacker using a specially formed application to gain access to keychain item management.

The issue is related to a lack of protection for service data in the iOS operating system. It allows a remote attacker to obtain sensitive information about inter-app communication via a crafted app that conducts an interception attack. The attack involves an unspecified URL scheme and can provide access to protected information.

The issue is related to the Bluetooth subsystem, which does not properly restrict access to certain data. This allows attackers to read Notification Center notifications of paired devices using a crafted app. The estimated number of potentially affected devices and details about real-world incidents are not provided.