iPadOS 18.1

[Apple libarchive] Processing a malicious crafted file may lead to a denial-of-service

[Apple Siri] An attacker with physical access may be able to access contact photos from the lock screen

[Apple GPU Drivers] An app may be able to cause unexpected system termination

[Apple iTunes] A remote attacker may be able to break out of Web Content sandbox

[Apple Siri] An app may be able to access sensitive user data

[Apple Siri] An app may be able to read sensitive location information

[Apple WebKit] Cookies belonging to one origin may be sent to another origin

[Apple ImageIO] Processing an image may result in disclosure of process memory

[Apple SceneKit] Processing a maliciously crafted file may lead to heap corruption

[Apple Safari Private Browsing] Private browsing may leak some browsing history

[Apple AppleAVD] Parsing a maliciously crafted video file may lead to unexpected system termination

[Apple AppleAVD] Parsing a maliciously crafted video file may lead to unexpected system termination

[Apple AppleAVD] Parsing a maliciously crafted video file may lead to unexpected system termination

[Apple Spotlight] An attacker may be able to view restricted content from the lock screen

[Apple IOMobileFrameBuffer] An app may be able to corrupt coprocessor memory

[Apple Kernel] An app may be able to leak sensitive kernel state

[Apple CoreText] Processing a maliciously crafted font may result in the disclosure of process memory

[Apple IOMobileFrameBuffer] An attacker may be able to cause unexpected system termination or arbitrary code execution …

[Apple IOMobileFrameBuffer] An attacker may be able to cause unexpected system termination or arbitrary code execution …

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple Spotlight] An attacker may be able to view restricted content from the lock screen

[Apple MobileBackup] Restoring a maliciously crafted backup file may lead to modification of protected system files

[Apple Shortcuts] An app may be able to access sensitive user data

[Apple App Support] A malicious app may be able to run arbitrary shortcuts without user consent

[Apple Managed Configuration] Restoring a maliciously crafted backup file may lead to modification of protected system …

[Apple Safari Downloads] An attacker may be able to misuse a trust relationship to download malicious content

[Apple VoiceOver] An attacker may be able to view restricted content from the lock screen

[Apple Siri] An app may be able to access user-sensitive data

[Apple Shortcuts] A malicious app may use shortcuts to access restricted files

[Apple CoreMedia Playback] A malicious app may be able to access private information

[Apple Accessibility] An attacker with physical access to a locked device may be able to view sensitive user information

[Apple Pro Res] An app may be able to cause unexpected system termination or corrupt kernel memory

[Apple Siri] A sandboxed app may be able to access sensitive user data in system logs

[Apple Foundation] Parsing a file may lead to disclosure of user information

[Apple IOSurface] An app may be able to cause unexpected system termination or corrupt kernel memory

[Apple Weather] An app may be able to determine a user’s current location

[Apple WebKit] Processing maliciously crafted web content may prevent Content Security Policy from being enforced

[Apple ImageIO] Processing a maliciously crafted message may lead to a denial-of-service

[Apple IOMobileFrameBuffer] An attacker may be able to cause unexpected system termination or arbitrary code execution …

[Apple CoreText] Processing a maliciously crafted font may result in the disclosure of process memory

[Apple Siri] An attacker with physical access may be able to access contacts from the lock screen

[Apple Calendar] An attacker with access to calendar data could also read reminders

[Apple Security] A remote attacker may be able to cause a denial-of-service

[Apple WidgetKit] A user may be able to view restricted content from the lock screen