| Reporter | Title | Published | Views | Family All 24 |
|---|---|---|---|---|
 | iOS / macOS 10.13.6 - if_ports_used_update_wakeuuid() 16-byte Uninitialized Kernel Stack Disclosure | 30 Jan 201900:00 | – | zdt |
 | macOS 10.14.x < 10.14.3 Multiple Vulnerabilities | 10 Apr 201900:00 | – | nessus |
| Apple iOS < 12.1.3 Multiple Vulnerabilities (APPLE-SA-2019-1-22-1) | 17 Apr 201900:00 | – | nessus |
| Apple iOS < 12.1.3 Multiple Vulnerabilities | 23 Jan 201900:00 | – | nessus |
| macOS and Mac OS X Multiple Vulnerabilities (Security Update 2019-001) | 25 Jan 201900:00 | – | nessus |
| macOS 10.13.6 Multiple Vulnerabilities (Security Update 2019-001) | 25 Jan 201900:00 | – | nessus |
| macOS 10.14.x < 10.14.3 Multiple Vulnerabilities | 25 Jan 201900:00 | – | nessus |
 | About the security content of tvOS 12.1.2 | 22 Jan 201900:00 | – | apple |
| About the security content of iOS 12.1.3 | 22 Jan 201900:00 | – | apple |
| About the security content of watchOS 5.1.3 | 22 Jan 201900:00 | – | apple |
10
[
{
"product": "iOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "iOS 12.1.3",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "macOS Mojave 10.14.3",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "tvOS 12.1.2",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "watchOS 5.1.3",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]| Source | Link |
|---|---|
| securityfocus | www.securityfocus.com/bid/106739 |
| support | www.support.apple.com/HT209446 |
| support | www.support.apple.com/HT209447 |
| exploit-db | www.exploit-db.com/exploits/46285/ |
| support | www.support.apple.com/HT209448 |
| support | www.support.apple.com/HT209443 |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| ifindex | path | net.link.generic.system.get_ports_used | Potential information leak via uninitialized wakeuuid handling when updating port usage; the PoC demonstrates reading a random kernel stack value through the net.link.generic.system.get_ports_used/sysctl path after setting SleepWakeUUID to an invalid/controlled value. | CWE-125 |
| protocol | path | net.link.generic.system.get_ports_used | Potential information leak via uninitialized wakeuuid handling when updating port usage; the PoC demonstrates reading a random kernel stack value through the net.link.generic.system.get_ports_used/sysctl path after setting SleepWakeUUID to an invalid/controlled value. | CWE-125 |
| flags | path | net.link.generic.system.get_ports_used | Potential information leak via uninitialized wakeuuid handling when updating port usage; the PoC demonstrates reading a random kernel stack value through the net.link.generic.system.get_ports_used/sysctl path after setting SleepWakeUUID to an invalid/controlled value. | CWE-125 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 02:38Current
4.9Medium risk
Vulners AI Score4.9
CVSS 24.3
CVSS 35.5
EPSS0.03694