UBUNTU-CVE-2018-4210

In iOS before 11.3, Safari before 11.1, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, an array indexing issue existed in the handling of a function in javascript core. This issue was addressed with improved checks...

UBUNTU-CVE-2018-4314

A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

Pangu Hackers have Jailbroken iOS 12 on Apple's New iPhone XS

Bad news for Apple. The Chinese hacking team Pangu is back and has once again surprised everyone with a jailbreak for iOS 12 running on the brand-new iPhone XS. Well, that was really fast. Pangu jailbreak team has been quiet for a while, since it last released the untethered jailbreak tool for iO...

WebKit Memory Misreference Vulnerability in Multiple Apple Products (CNVD-2018-20999)

Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser shipped with the Mac OS X and iOS operating systems. iTunes for Windows is a media player and application for the Windows platform. WebKit is one of the web browser engine components...

Apple iOS CoreMedia Component Information Disclosure Vulnerability

Apple iOS is an operating system developed by Apple for mobile devices, of which CoreMedia is one of the media core components. A security vulnerability exists in the CoreMedia component in versions of Apple iOS prior to 12. The vulnerability can be exploited by an application to obtain informati...

Apple macOS/OS X power lifting vulnerability

macOS is Apple's proprietary operating system for the Mac line of products. Apple macOS/OS X is vulnerable to a privilege extraction vulnerability due to a type confusion error triggered in the ATS component, which can be exploited by an attacker to gain root privileges...

CVE-2018-4251

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Firmware" component. It allows attackers to modify the EFI flash-memory region that a crafted app that has root access...

CVE-2018-4235

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Messages" component. It allows local users to perform impersonation attacks via an unspecified...

CVE-2018-4196

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Accessibility Framework" component. It allows attackers to execute arbitrary code in a privileged context or obtain sensitive information via a crafted app...

CVE-2018-4184

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Speech" component. It allows attackers to bypass a sandbox protection mechanism to obtain microphone access...

Apple macOS High Sierra Input Validation Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Graphics driver is one of the graphics drivers. A security vulnerability exists in the Graphics driver component of Apple macOS High Sierra. The vulnerability can be exploited by an attacker to read...

Apple iOS Siri Permissions Vulnerability (CNVD-2018-12172)

Apple iOS is an operating system developed by Apple Inc. for mobile devices, of which Siri is a voice control component. A security vulnerability exists in the Siri component of Apple iOS prior to version 11.4. An attacker in close physical proximity could use Siri to bypass the lock screen...

Apple iOS and Safari Denial of Service Vulnerability

Apple iOS and Safari are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser shipped with the Mac OS X and iOS operating systems.Safari is one of the specialized components used in the Safari browser. A...

Apple iOS Find My iPhone Denial of Service Vulnerability

Apple iOS is an operating system developed by Apple for mobile devices.Find My iPhone is one of the components that provides the ability to retrieve an accidentally lost iPhone. A security vulnerability exists in the Find My iPhone component in Apple iOS versions prior to 11.3. The vulnerability...

Apple macOS High Sierra Mail Man-in-the-Middle Attack Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple Inc. for Mac computers.Mail is one of the email components. A security vulnerability exists in the handling of S/MIME HTML email messages in the Mail component in Apple macOS High Sierra versions prior to 10.13.4. An...

Apple macOS High Sierra Spotlight Information Disclosure Vulnerability

Apple macOS High Sierra is a dedicated operating system developed by Apple Inc. for Mac computers.Spotlight is one of the components used to search the system for files, programs, and other content. A security vulnerability exists in the Spotlight component in Apple macOS High Sierra versions pri...

CVE-2018-4082

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or...

Apple macOS High Sierra APFS Password Truncation Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.APFS is one of the file system components for Apple devices. A security vulnerability exists in the APFS component in Apple macOS High Sierra versions prior to 10.13.4. An attacker could exploit the...

Apple MACOS/OSX Arbitrary Code Execution Vulnerability

Apple macOS High Sierra is a suite of Apple's proprietary operating systems developed specifically for Mac computers.IOFireWireFamily is one of the FireWire interface drivers. A security vulnerability exists in the IOFireWireFamily component of Apple macOS High Sierra versions prior to 10.13.4. A...

Apple macOS High Sierra ATS Information Disclosure Vulnerability (CNVD-2018-07658)

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.ATS is one of the Application Transport Security components. A security vulnerability exists in the ATS component in Apple macOS High Sierra versions prior to 10.13.4. The vulnerability can be exploited...