iPadOS 18.5

[Apple libexpat] Multiple issues in libexpat, including unexpected app termination or arbitrary code execution

[Apple Kernel] A remote attacker may be able to cause unexpected system termination

[Apple WebKit] A type confusion issue could lead to memory corruption

[Apple WebKit] Processing maliciously crafted web content may lead to memory corruption

[Apple Mail Addressing] Processing an email may lead to user interface spoofing

[Apple iCloud Document Sharing] An attacker may be able to turn on sharing of an iCloud folder without authentication

[Apple WebKit] Processing maliciously crafted web content may lead to memory corruption

[Apple WebKit] A malicious website may exfiltrate data cross-origin

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected Safari crash

[Apple FrontBoard] An app may be able to enumerate a user's installed apps

[Apple CoreAudio] Parsing a file may lead to an unexpected app termination

[Apple CoreGraphics] Parsing a file may lead to disclosure of user information

[Apple FaceTime] Processing web content may lead to a denial-of-service

[Apple Core Bluetooth] An app may be able to access sensitive user data

[Apple Baseband] An attacker in a privileged network position may be able to intercept network traffic

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple Wi-Fi] An attacker with physical access to a device may be able to override managed Wi-Fi profiles

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected Safari crash

[Apple Kernel] An attacker may be able to cause unexpected system termination or corrupt kernel memory

[Apple Security] A remote attacker may be able to leak memory

[Apple mDNSResponder] A user may be able to elevate privileges

[Apple WebKit] Processing maliciously crafted web content may lead to memory corruption

[Apple Call History] Call history from deleted apps may still appear in spotlight search results

[Apple ImageIO] Processing a maliciously crafted image may lead to a denial-of-service

[Apple Notes] An attacker with physical access to a device may be able to access a deleted call recording

[Apple Notes] An attacker with physical access to a device may be able to access notes from the lock screen

[Apple CoreMedia] Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process…

[Apple Pro Res] An attacker may be able to cause unexpected system termination or corrupt kernel memory

[Apple WebKit] Processing maliciously crafted web content may lead to memory corruption

[Apple CoreMedia] Parsing a file may lead to an unexpected app termination

[Apple Kernel] A remote attacker may cause an unexpected app termination

[Apple StoreKit] An app may be able to access sensitive user data

[Apple Pro Res] An app may be able to cause unexpected system termination

[Apple AppleJPEG] Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process…

[Apple FaceTime] Muting the microphone during a FaceTime call may not result in audio being silenced

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected Safari crash

[Apple Wi-Fi] An attacker in physical proximity may be able to cause an out-of-bounds read in kernel memory