Design/Logic Flaw

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Quick Look" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

Design/Logic Flaw

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

Design/Logic Flaw

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-13822

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Quick Look" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-13823

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "QuickTime" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-13821

CVE-2017-13821 affects macOS (pre-10.13.1) and involves the CFString component, allowing a crafted app to bypass memory-read restrictions. Public details present in Apple security content entries reference CVE-2017-13821 and indicate the vulnerability in the CFString path; the initial description...

CVE-2017-13822

CVE-2017-13822 affects macOS up to 10.13.0; the issue is in the Quick Look component, allowing a crafted app to bypass memory-read restrictions and read restricted memory. Affected product/area: macOS Quick Look. Root cause: memory-restriction bypass via crafted app. Impact: attacker can read res...

CVE-2017-13817

An out-of-bounds read issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows local users to bypass intended memory-read restrictions...

CVE-2017-13840

CVE-2017-13840 affects macOS before 10.13.1 in the Kernel component. A crafted app can bypass memory-read restrictions, potentially exposing restricted memory. Remediation: upgrade to macOS 10.13.1 (or later) as provided by Apple.

CVE-2017-13818

CVE-2017-13818 affects macOS prior to 10.13.1, specifically the Kernel. A crafted app can bypass memory-read restrictions, effectively reading restricted kernel memory. This is a local bypass vulnerability; the issue is documented by NVD/NIST with Apple references. Remediation: update macOS to 10...

CVE-2017-13823

CVE-2017-13823 affects macOS prior to 10.13.1, specifically the QuickTime component, enabling bypass of memory-read restrictions via a crafted app. The issue is documented by Apple in the macOS High Sierra 10.13.1 security update (HT208221) and listed among affected components; Apple notes the up...

CVE-2017-13842

The CVE-2017-13842 entry applies to Apple macOS Kernel on affected systems prior to macOS 10.13.1, where a crafted app can bypass memory-read restrictions, enabling a local attacker to read restricted memory. This is described as a memory-read bypass in the Kernel component with a mitigating patc...

CVE-2017-13841

Summary: CVE-2017-13841 affects macOS before 10.13.1, in the Kernel, enabling an attacker to bypass memory-read restrictions via a crafted app. The issue is documented across the NVD/NVD description and Apple security updates entries, which associate the vulnerability with kernel memory access an...

CVE-2017-13842

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-13821

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "CFString" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-13840

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-13818

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-13836

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-13841

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-13817

CVE-2017-13817 is an out-of-bounds read vulnerability reported in the macOS Kernel affecting macOS versions prior to 10.13.1. The issue allows a local user to bypass memory-read restrictions and read kernel memory. The description and linked sources (NVD entry for CVE-2017-13817 and Apple Securit...