Accessibility. A logging issue was addressed with improved data redaction.
A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.3, visionOS 2.3. An attacker on the local network may be able to cause a denial-of-service.
Accessibility. A logging issue was addressed with improved data redaction.
The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.4, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, Safari 18.4. Processing maliciously crafted web content may lead to an unexpected Safari crash.
A use-after-free issue was addressed with improved memory management. This issue is fixed in visionOS 2.4, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, Safari 18.4. Processing maliciously crafted web content may lead to an unexpected Safari crash.
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in tvOS 18.4, Safari 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Processing maliciously crafted web content may lead to an unexpected process crash.
A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.1.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.1..
Accelerate Framework. A memory consumption issue was addressed with improved memory handling.
A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8. An application may be able to execute arbitrary code with kernel privileges.
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to arbitrary code execution.
WebKit. Multiple memory corruption issues were addressed through improved memory handling.
WebKit. Multiple memory corruption issues were addressed through improved memory handling.
WebKit. Multiple memory corruption issues were addressed through improved memory handling.
WebKit. A logic issue existed in frame handling. This issue was addressed through improved state management.
WebKit. Multiple memory corruption issues were addressed through improved memory handling.
WebKit. Multiple memory corruption issues were addressed through improved memory handling.
WebKit. Multiple memory corruption issues were addressed through improved memory handling.
WebKit. Multiple memory corruption issues were addressed through improved memory handling.
WebKit. Multiple memory corruption issues were addressed through improved memory handling.
WebKit. Multiple memory corruption issues were addressed through improved memory handling.
WebKit. Multiple memory corruption issues were addressed through improved memory handling.
WebKit. Multiple memory corruption issues were addressed through improved memory handling.
WebKit. Multiple memory corruption issues were addressed through improved memory handling.
WebKit. A logic issue existed in the handling of strict mode functions. This issue was addressed with improved state management.
WebKit. A memory corruption issue was addressed through improved memory handling.
WebKit. A logic issue existed in the handling of frame objects. This issue was addressed with improved state management.
WebKit. Multiple memory corruption issues were addressed through improved input validation.
WebKit. Multiple memory corruption issues were addressed through improved memory handling.
WebKit. A prototype access issue was addressed through improved exception handling.
WebKit. Multiple memory corruption issues were addressed through improved input validation.