iPadOS 18.3

xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can…

[Apple Display] An app may be able to cause unexpected system termination

[Apple Kernel] An app may be able to leak sensitive kernel state

[Apple Safari] Visiting a malicious website may lead to user interface spoofing

[Apple AirPlay] An attacker on the local network may be able to corrupt process memory

[Apple AirPlay] An attacker on the local network may cause an unexpected app termination

[Apple AirPlay] An attacker on the local network may be able to cause a denial-of-service

[Apple CoreAudio] Parsing a file may lead to an unexpected app termination

[Apple AirPlay] An attacker on the local network may be able to cause a denial-of-service

[Apple AirPlay] An attacker on the local network may be able to cause a denial-of-service

[Apple ImageIO] Processing an image may lead to a denial-of-service

[Apple Icons] An app may be able to enumerate a user's installed apps

[Apple Icons] An app may be able to enumerate a user's installed apps

[Apple Libnotify] An app may be able to cause a denial-of-service

[Apple Managed Configuration] Restoring a maliciously crafted backup file may lead to modification of protected system …

[Apple Kernel] A malicious app may be able to gain root privileges

[Apple LaunchServices] An app may be able to fingerprint the user

[Apple CoreMedia] Parsing a file may lead to an unexpected app termination

[Apple CoreMedia] Parsing a file may lead to an unexpected app termination

[Apple ARKit] Parsing a file may lead to an unexpected app termination

[Apple Safari] Visiting a malicious website may lead to address bar spoofing

[Apple AirPlay] An attacker on the local network may corrupt process memory

[Apple Accessibility] An attacker with physical access to an unlocked device may be able to access Photos while the app…

[Apple WebKit] A maliciously crafted webpage may be able to fingerprint the user

[Apple Time Zone] An app may be able to view a contact's phone number in system logs

[Apple SceneKit] Parsing a file may lead to disclosure of user information

[Apple WebKit Web Inspector] Copying a URL from Web Inspector may lead to command injection

[Apple WebContentFilter] An attacker may be able to cause unexpected system termination or corrupt kernel memory

[Apple WebKit] Processing web content may lead to a denial-of-service

[Apple Kernel] An app may be able to execute arbitrary code with kernel privileges

[Apple CoreAudio] Parsing a file may lead to an unexpected app termination

[Apple CoreAudio] Parsing a file may lead to an unexpected app termination

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple CoreMedia Playback] An app may be able to cause unexpected system termination

[Apple WebKit] Processing maliciously crafted web content may lead to memory corruption

[Apple Safari] Photos in the Hidden Photos Album may be viewed without authentication

[Apple PackageKit] An app may be able to modify protected parts of the file system

Chromium: CVE-2024-9956 Inappropriate implementation in Web Authentication