watchOS 11.4 Security Update: WebKit RCE, Kernel Privilege Escalation, and Multiple Component Vulnerabilities

Critical Vulnerability Information Vulnerability Types and Impacts AirDrop: Processing maliciously crafted files may lead to memory corruption, potentially causing process crashes. Audio: Processing maliciously crafted files may allow arbitrary code execution. Authentication Services: Attackers over the network can claim WebAuthn assertions from other websites and share registration certificates. BiometricKit: Malicious applications can terminate the system without user consent. Calendar: Applications may break out of their sandbox boundaries. CoreAudio: Malicious applications can access private information over the network. CoreServices: Applications can access sensitive user data. CoreText: Processing maliciously crafted font files may lead to memory corruption, potentially causing process crashes or arbitrary code execution. curl: Vulnerabilities exist in open-source code and Apple software, potentially leading to memory corruption. Focus: Local devices with physical access can view sensitive user information. Foundation: Applications can access sensitive user data. ImageIO: Applications may leak user information due to image processing. IOGPUFamily: Malicious applications can compromise system integrity or write to kernel memory. Kernel: Maliciously crafted kernel extension loaders passed to locked devices may ultimately result in delayed backdoor failures. libarchive: Vulnerabilities exist in open-source code and Apple software, potentially leading to memory corruption. libcrypto: Malicious applications can break out of their sandbox boundaries. libm2: Applications may unexpectedly terminate when reading undefined files. libpcap: Applications can obtain private credentials. Maps: Applications can read location information. NetworkExtension: Applications can bypass user-imposed restrictions. Power Services: Applications may break out of their sandbox boundaries. Safari: Malicious websites can detect whether recording is active on the lock screen. Security: Network attackers can delete security files typically inaccessible via the Shortcuts app. Share Sheet: Applications can access sensitive user data. Shortcuts: Applications can access security files typically inaccessible via the Shortcuts app. Siri: Applications can access sensitive user data. SiriKit: Applications can access sensitive user data. WebKit: Malicious websites can exploit this vulnerability to break the WebKit sandbox. WebKit: Processing maliciously crafted web content may lead to unexpected process crashes. WebKit: Malicious websites may enable user tracking in Safari’s private browsing mode. Solutions and Fixes Most vulnerabilities were resolved by improving memory management, input validation, permission checks, and error handling. Some vulnerabilities were fixed by updating open-source code libraries and third-party libraries. Certain vulnerabilities were mitigated by adding additional checks and restrictions to prevent unauthorized access and operations. Scope of Impact These vulnerabilities affect multiple components and services in watchOS 11.4, including but not limited to AirDrop, Audio, Authentication Services, BiometricKit, etc. The vulnerabilities may lead to security risks such as information disclosure, arbitrary code execution, system crashes, and privilege escalation.

Goal Reached Thanks to every supporter — we hit 100%!

watchOS 11.4 Security Update: WebKit RCE, Kernel Privilege Escalation, and Multiple Component Vulnerabilities