iPadOS 17.7.6

[Apple libxml2] Parsing a file may lead to an unexpected app termination

[Apple curl] An input validation issue was addressed

[Apple libxml2] Parsing a file may lead to an unexpected app termination

[Apple Shortcuts] A shortcut may be able to access files that are normally inaccessible to the Shortcuts app

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple WebKit] Processing maliciously crafted web content may lead to memory corruption

[Apple WebKit] Processing maliciously crafted web content may lead to memory corruption

[Apple Safari] Visiting a malicious website may lead to user interface spoofing

[Apple AirPlay] An attacker on the local network may be able to cause a denial-of-service

[Apple Power Services] An app may be able to break out of its sandbox

[Apple AirPlay] An attacker on the local network may be able to cause a denial-of-service

[Apple libxpc] An app may be able to break out of its sandbox

[Apple AirPlay] An attacker on the local network may be able to cause a denial-of-service

[Apple CoreMedia] Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process…

[Apple Siri] An attacker with physical access may be able to use Siri to access sensitive user data

[Apple Kernel] An app may be able to modify protected parts of the file system

[Apple Siri] An app may be able to access user-sensitive data

[Apple AirPlay] An attacker on the local network may be able to bypass authentication policy

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple ImageIO] Parsing an image may lead to disclosure of user information

[Apple CoreMedia] Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process…

[Apple Calendar] An app may be able to break out of its sandbox

[Apple CloudKit] A malicious app may be able to access private information

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected Safari crash

[Apple Accounts] Sensitive keychain data may be accessible from an iOS backup

[Apple CoreAudio] Playing a malicious audio file may lead to an unexpected app termination

[Apple BiometricKit] An app may be able to cause unexpected system termination

[Apple Audio] Processing a maliciously crafted file may lead to arbitrary code execution

[Apple Audio] Processing a maliciously crafted font may result in the disclosure of process memory

[Apple AirPlay] An attacker on the local network may cause an unexpected app termination

[Apple AirPlay] An attacker on the local network may be able to corrupt process memory

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected Safari crash

[Apple AirPlay] An attacker on the local network may be able to leak sensitive user information

[Apple AirPlay] An unauthenticated user on the same network as a signed-in Mac could send it AirPlay commands without p…

[Apple WebKit] A malicious website may be able to track users in Safari private browsing mode

[Apple NetworkExtension] An app may be able to enumerate a user's installed apps

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected Safari crash

[Apple Photos] Photos in the Hidden Photos Album may be viewed without authentication

[Apple Calendar] An app may be able to break out of its sandbox

[Apple Kernel] A malicious app may be able to attempt passcode entries on a locked device and thereby cause escalating …

[Apple Shortcuts] A shortcut may be able to access files that are normally inaccessible to the Shortcuts app

[Apple AirPlay] An attacker on the local network may cause an unexpected app termination

[Apple Foundation] An app may be able to access sensitive user data

[Apple Security] A remote user may be able to cause a denial-of-service

[Apple AirPlay] An attacker on the local network may cause an unexpected app termination

[Apple CoreUtils] An attacker on the local network may be able to cause a denial-of-service

[Apple Audio] An app may be able to bypass ASLR