iPadOS 18

[Apple LaunchServices] An application may be able to break out of its sandbox

[Apple ARKit] Processing a maliciously crafted file may lead to heap corruption

[Apple SceneKit] Processing a maliciously crafted file may lead to unexpected app termination

[Apple Safari] Maliciously crafted web content may violate iframe sandboxing policy

[Apple Model I/O] Processing a maliciously crafted image may lead to a denial-of-service

[Apple Control Center] An app may be able to record the screen without an indicator

[Apple Cellular] A remote attacker may be able to cause a denial-of-service

[Apple Compression] Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files

[Apple UIKit] An attacker may be able to cause unexpected app termination

[Apple ImageIO] Processing a maliciously crafted file may lead to unexpected app termination

[Apple Mail Accounts] An app may be able to access information about a user's contacts

[Apple Printing] An unencrypted document may be written to a temporary file when using print preview

[Apple Accessibility] An app may be able to enumerate a user's installed apps

[Apple Accessibility] An attacker with physical access may be able to use Siri to access sensitive user data

[Apple Game Center] An app may be able to access user-sensitive data

[Apple Accessibility] An attacker may be able to see recent photos without authentication in Assistive Access

[Apple Siri] An attacker may be able to use Siri to enable Auto-Answer Calls

[Apple Wi-Fi] An attacker may be able to force a device to disconnect from a secure network

[Apple WebKit] Processing maliciously crafted web content may lead to universal cross site scripting

[Apple Sandbox] An app may be able to leak sensitive user information

[Apple Security] A malicious app with root privileges may be able to access keyboard input and location information wit…

[Apple Core Bluetooth] A malicious Bluetooth input device may bypass pairing

[Apple Safari Private Browsing] Private Browsing tabs may be accessed without authentication

[Apple FileProvider] An app may be able to access sensitive user data

[Apple Siri] An attacker with physical access may be able to access contacts from the lock screen

[Apple Sidecar] An attacker with physical access to a macOS device with Sidecar enabled may be able to bypass the Lock …

[Apple NetworkExtension] An app may gain unauthorized access to Local Network

[Apple Kernel] Network traffic may leak outside a VPN tunnel

[Apple Notes] An app may be able to overwrite arbitrary files

[Apple IOSurfaceAccelerator] An app may be able to cause unexpected system termination

[Apple Siri] An app may be able to access user-sensitive data

[Apple Accessibility] An attacker with physical access to a locked device may be able to Control Nearby Devices via acc…

[Apple ImageIO] Processing an image may lead to a denial-of-service

[Apple Siri] An attacker with physical access to a device may be able to read contact numbers from the lock screen

[Apple Siri] An attacker with physical access may be able to access contacts from the lock screen

[Apple mDNSResponder] An app may be able to cause a denial-of-service

[Apple Transparency] An app may be able to access user-sensitive data

[Apple WebKit] A malicious website may exfiltrate data cross-origin

[Apple Kernel] An app may gain unauthorized access to Bluetooth

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple libxml2] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple Safari Private Browsing] Private Browsing tabs may be accessed without authentication

[Apple Passwords] Password autofill may fill in passwords after failing authentication

[Apple Wi-Fi] An app may be able to cause unexpected system termination or corrupt kernel memory

[Apple WebKit] A malicious website may exfiltrate data cross-origin

[Apple FileProvider] A local user may be able to leak sensitive user information

[Apple TCC] An app may be able to trick a user into granting access to photos from the user's photo library

[Apple LaunchServices] A malicious app may be able to modify other apps without having App Management permission