About the security content of iCloud for Windows 7.4 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

About the security content of iCloud for Windows 7.3 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

Remote Code Execution (RCE)

Microsoft Chakracore is vulnerable to remote code execution. Converting accessor property to data leads to type confusion which can result in arbitrary code execution. This CVE ID is different from CVE-2018-8503, CVE-2018-8505, CVE-2018-8510, CVE-2018-8511...

Remote Code Execution (RCE)

Microsoft.ChakraCore is vulnerable to remote code execution. A missing BytecodeUses for IsIn optimization leads to type confusion which can result in arbitrary code execution. This CVE ID is different from CVE-2018-8503, CVE-2018-8505, CVE-2018-8511, CVE-2018-8513...

Remote code execution

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8503, CVE-2018-8510,...

Remote code execution

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8503, CVE-2018-8505,...

About the security content of tvOS 12

About the security content of tvOS 12 This document describes the security content of tvOS 12. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution. This is due to an invalid stack read which leads to type confusion. This vulnerability affects Internet Explorer 11, Microsoft Edge and Internet Explorer 10. This CVE ID is different from CVE-2018-8354, CVE-2018-8391, CVE-2018-8456,...

Information disclosure

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8419, CVE-2018-8442,...

Remote code execution

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8367, CVE-2018-8465,...

Remote code execution

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8391, CVE-2018-8456, CVE-2018-8457,...

Denial of service

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system, aka "Windows Hyper-V Denial of Service Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows...

Remote code execution

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8367, CVE-2018-8466,...

Information disclosure

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8336, CVE-2018-8419, CVE-2018-8442, CVE-2018-844...

Information disclosure

An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1,...

About the security content of iOS 10 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

Denial Of Service

libexiv2.so is vulnerable to denial of service. The Exiv2::Internal::PngChunk::parseTXTChunk function allows remote attackers to cause a denial of service condition through a heap-based buffer over-read using a crafted image file. This CVE ID is different from CVE-2018-10999...

About the security content of macOS High Sierra 10.13.6 Supplemental Update 2 for MacBook Pro (2018) - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution. ProxyEntryPointInfo causes out-of-bound writes or arbitrary code being executed. This CVE ID is different from CVE-2018-8353, CVE-2018-8355, CVE-2018-8371, CVE-2018-8372, CVE-2018-8373, CVE-2018-8385, CVE-2018-8389, CVE-2018-8390...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution. When an exception occurs, it uses wrong calling information on inlineeFrame, leading to memory corruption or arbitrary code being executed. This vulnerability affects Microsoft Edge as well. This CVE ID is different from CVE-2018-8266,...