Memory corruption

A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9...

Input validation

A logic issue was addressed with improved validation. This issue affected versions prior to macOS Mojave 10.14.1...

CVE-2018-4439

CVE-2018-4439 corresponds to a logic issue that was addressed with improved validation. It affects multiple Apple software versions prior to their patch levels: iOS before 12.1.1, Safari 12.0.2, iTunes 12.9.2 for Windows, and iCloud for Windows 7.9. The available connected documents confirm the r...

CVE-2018-4438

A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9...

CVE-2018-4440

A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9...

CVE-2018-4438

A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9...

CVE-2018-4439

A logic issue was addressed with improved validation. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9...

CVE-2018-4438

CVE-2018-4438 is a memory-corruption vulnerability in WebKit/Safari affecting devices with iOS < 12.1.1, tvOS < 12.1.1, watchOS

CVE-2018-4435

A logic issue was addressed with improved restrictions. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2...

CVE-2018-4435

CVE-2018-4435 is a kernel-level logic issue addressed by Apple across multiple platforms. According to the initial entry, the vulnerability affected iOS before 12.1.1, macOS Mojave before 10.14.2, tvOS before 12.1.1, and watchOS before 5.1.2, and was fixed by applying improved restrictions. Suppo...

CVE-2018-4423

A logic issue was addressed with improved validation. This issue affected versions prior to macOS Mojave 10.14.1...

CVE-2018-4385

A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12.1...

CVE-2018-4374

CVE-2018-4374 is a logic issue in Safari Reader (WebKit) that was addressed by improved input/URL validation. Affected products include iOS prior to 12.1, watchOS prior to 5.1, Safari prior to 12.0.1, iTunes prior to 12.9.1, and iCloud for Windows prior to 7.8. Apple’s security notes for iOS 12.1...

CVE-2018-4369

A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1...

CVE-2018-4374

A logic issue was addressed with improved validation. This issue affected versions prior to iOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8...

CVE-2018-4369

CVE-2018-4369 is a logic issue addressed with improved state management affecting NetworkExtension across Apple platforms. It affected iOS <12.1, macOS Mojave <10.14.1, tvOS <12.1, and watchOS

CVE-2018-4325

A logic issue was addressed with improved restrictions. This issue affected versions prior to iOS 12...

CVE-2018-4325

CVE-2018-4325 affects iOS prior to 12, tied to the Status Bar component. The issue is described as a logic issue addressed by improved restrictions. Red Hat and CNVD entries align with a local-access impact related to discovering the last used app from the lock screen; no public exploit details a...

CVE-2018-4307

A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12, Safari 12...

CVE-2018-4307

CVE-2018-4307 describes a logic issue in Safari/Apple’s WebKit stack affecting iOS prior to 12 and Safari 12. The root cause is described as a state-management flaw; impact is characterized as a modest security risk (CVSS ~4.3) with network attack potential and user interaction required per the m...