iPadOS 17.5

[Apple Apple Neural Engine] A local attacker may be able to cause unexpected system shutdown

[Apple Libsystem] An app may be able to access protected user data

[Apple Mail] An attacker with physical access may be able to leak Mail account credentials

[Apple Mail] A maliciously crafted email may be able to initiate FaceTime calls without user authorization

[Apple AVEVideoEncoder] A user may be able to elevate privileges

[Apple AVEVideoEncoder] Processing a maliciously crafted message may lead to a denial-of-service

[Apple Foundation] An app may be able to elevate privileges

[Apple AVEVideoEncoder] Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code …

[Apple Screenshots] An attacker with physical access may be able to share items from the lock screen

[Apple AppleAVD] An app may be able to cause unexpected system termination

[Apple AVEVideoEncoder] An app may be able to access sensitive user data

[Apple AVEVideoEncoder] An app may be able to access sensitive user data

[Apple Symptom Framework] An app may be able to circumvent App Privacy Report logging

[Apple WebKit] Processing web content may lead to arbitrary code execution

[Apple AVEVideoEncoder] An app may be able to read sensitive location information

[Apple libiconv] An app may be able to elevate privileges

[Apple Kernel] An app may be able to execute arbitrary code with kernel privileges

[Apple AppleMobileFileIntegrity] An attacker may be able to access user data

[Apple AVEVideoEncoder] An app may be able to execute arbitrary code with kernel privileges

[Apple Kernel] An attacker may be able to cause unexpected app termination or arbitrary code execution

[Apple Siri] An attacker with physical access may be able to access contacts from the lock screen

[Apple WebKit Web Inspector] Processing web content may lead to arbitrary code execution

[Apple Shortcuts] A shortcut may output sensitive user data without consent

[Apple AVEVideoEncoder] An attacker in a privileged network position may be able to spoof network packets

[Apple IOSurface] An app may be able to execute arbitrary code with kernel privileges

[Apple WebKit Canvas] A maliciously crafted webpage may be able to fingerprint the user

[Apple AVEVideoEncoder] Processing a file may lead to unexpected app termination or arbitrary code execution

[Apple Disk Images] An app may be able to elevate privileges

[Apple WebKit] Processing maliciously crafted web content may lead to arbitrary code execution

[Apple WebKit] An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication

[Apple Notes] An attacker with physical access to an iOS device may be able to access notes from the lock screen

[Apple ImageIO] Processing a maliciously crafted image may lead to arbitrary code execution

[Apple WebKit] A maliciously crafted webpage may be able to fingerprint the user

[Apple Find My] A malicious application may be able to determine a user's current location

[Apple AVEVideoEncoder] An attacker that has already achieved kernel code execution may be able to bypass kernel memory…

[Apple AVEVideoEncoder] An app may be able to disclose kernel memory

[Apple Notes] An app may be able to access Notes attachments

[Apple AVEVideoEncoder] An app may be able to bypass Privacy preferences

[Apple StorageKit] A malicious app may be able to gain root privileges

[Apple WebKit] A maliciously crafted webpage may be able to fingerprint the user

[Apple WebKit] Processing maliciously crafted web content may lead to arbitrary code execution

[Apple MarketplaceKit] A maliciously crafted webpage may be able to distribute a script that tracks users on other webp…

[Apple AVEVideoEncoder] A shortcut may be able to use sensitive data with certain actions without prompting the user

[Apple WebKit] Processing a file may lead to unexpected app termination or arbitrary code execution

[Apple Metal] A remote attacker may be able to cause unexpected app termination or arbitrary code execution

[Apple Transparency] An app may be able to access user-sensitive data

[Apple AVEVideoEncoder] An app may be able to execute arbitrary code with kernel privileges

[Apple Status Bar] An attacker with physical access to an iOS device may be able to view notification contents from the…

[Apple Face ID] An attacker with physical access to a device may be able to disable Stolen Device Protection