Apple iOS, macOS High Sierra and watchOS CoreFoundation Competitive Conditions Vulnerability

Apple iOS, macOS High Sierra, and watchOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; macOS High Sierra is a specialized operating system for Mac computers; and watchOS is a smartwatch operating system. CoreFoundation is one of the core functional components. A...

CVE-2018-4174

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "Mail" component. It allows man-in-the-middle attackers to read S/MIME encrypted messages by leveraging an inconsistency in the user interface...

CVE-2018-4131

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "WindowServer" component. It allows attackers to bypass the Secure Input Mode protection mechanism, and log keystrokes of arbitrary apps, via a crafted app that...

CVE-2018-4100

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. watchOS before 4.2.2 is affected. The issue involves the "LinkPresentation" component. It allows remote attackers to cause a denial of service resource consumption via a crafted tex...

CVE-2018-4098

An issue was discovered in certain Apple products. macOS before 10.13.3 is affected. The issue involves the "IOHIDFamily" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

Apple macOS High Sierra Notes Competitive Conditions Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Notes is a component of the application that modifies fonts. A competitive condition vulnerability exists in the Notes component in Apple macOS High Sierra versions prior to 10.13.4. An attacker can...

PrivateVPN for macOS Privilege Permission and Access Control Vulnerability

PrivateVPN for macOS is a macOS-based VPN software for anonymous access to the Internet. A privilege permission and access control vulnerability exists in PrivateVPN for macOS based platforms. The vulnerability can be exploited by an attacker to execute arbitrary code as root by sending a malicio...

UBUNTU-CVE-2018-4096

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. Safari before 11.0.3 is affected. iCloud before 7.3 on Windows is affected. iTunes before 12.7.3 on Windows is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is...

LinkPresentation component denial of service vulnerability in multiple Apple products

Apple iOS, macOS High Sierra, and watchOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; macOS High Sierra is a specialized operating system for Mac computers; and watchOS is an operating system for smartwatches. LinkPresentation is one of the presentation display...

Multiple Apple Products Kernel Memory Initialization Vulnerability

Apple iOS, macOS High Sierra, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices. macOS High Sierra is a specialized operating system developed for Mac computers. tvOS is a smart TV operating system. watchOS is a smart watch operating system...

The vulnerability of the Mac OS X operating system’s kernel allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the Mac OS X operating system’s kernel arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context, or cause a service failure memory corruption through a...

The vulnerability of the Mac OS X operating system’s file component allows a hacker to trigger a service failure or cause other adverse effects.

The vulnerability of the Mac OS X operating system’s file component is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure application termination or have other adverse effects...

The vulnerability of the 802.1X component of the Mac OS X operating system allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the 802.1X component in the Mac OS X operating system is related to errors in the implementation of the TLS 1.0 protocol. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

Apple macOS High Sierra Arbitrary File Read Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Screen Sharing Server is one of the screen sharing server components. A security vulnerability exists in the Screen Sharing Server component of Apple macOS High Sierra. The vulnerability can be exploite...

CVE-2017-13869

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted...

Apple macOS High Sierra IOKit Component Input Validation Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.IOKit is one of the components that reads system information. An input validation vulnerability exists in the IOKit component in Apple macOS High Sierra versions prior to 10.13.2. An attacker can exploi...

CVE-2017-13843

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2017-13829

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "CFNetwork" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2017-13799

An issue was discovered in certain Apple products. iOS before 11.1 is affected. macOS before 10.13.1 is affected. tvOS before 11.1 is affected. watchOS before 4.1 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause...

Apple macOS High Sierra HelpViewer Cross-Site Scripting Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.HelpViewer is one of the HelpViewer components. A security vulnerability exists in the HelpViewer component in Apple macOS High Sierra versions prior to 10.13.1. A remote attacker can exploit this...