CVE-2018-17961

Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving errorhandler setup. NOTE: this issue exists because of an incomplete fix for CVE-2018-17183...

CVE-2018-18073

Artifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging exposure of system operators in the saved execution stack in an error object...

CVE-2018-17961

CVE-2018-17961 affects Artifex Ghostscript 9.25 and earlier. It enables sandbox bypass via vectors involving errorhandler setup, saved execution stacks, or the 1Policy operator, potentially allowing code execution or sandbox escape when processing crafted PostScript. The issue is related to an in...

CVE-2018-18073

Artifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging exposure of system operators in the saved execution stack in an error object...

CVE-2018-18073

CVE-2018-18073 describes a sandbox-bypass vulnerability in Artifex Ghostscript. The issue arises in Ghostscript 9.25 and earlier where the saved execution stack can leak operator arrays or expose system operators in an error object, allowing a crafted PostScript to bypass -dSAFER/sandbox protecti...

CVE-2018-18073

Artifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging exposure of system operators in the saved execution stack in an error object...

CVE-2018-18073

Artifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging exposure of system operators in the saved execution stack in an error object...

PT-2018-1914

Name of the Vulnerable Software and Affected Versions Artifex Ghostscript affected versions not specified Description The issue is related to the bypass of a sandbox protection mechanism in Artifex Ghostscript. This is due to the exposure of system operators in the saved execution stack in an err...

PT-2018-1915

Name of the Vulnerable Software and Affected Versions Artifex Ghostscript versions 9.25 and earlier Description The issue is related to an incomplete fix for a previous problem, allowing attackers to bypass a sandbox protection mechanism. This is due to insufficient access control in the Sandbox...

Design/Logic Flaw

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Grand Central Dispatch" component. It allows attackers to bypass a sandbox protection mechanism by leveraging the misparsing of entitlement plists...

CVE-2018-4229

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Grand Central Dispatch" component. It allows attackers to bypass a sandbox protection mechanism by leveraging the misparsing of entitlement plists...

CVE-2018-4184

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Speech" component. It allows attackers to bypass a sandbox protection mechanism to obtain microphone access...

CVE-2018-4184

CVE-2018-4184 affects macOS High Sierra before 10.13.5, involving the Speech component. The issue allows a sandbox-protected application to bypass sandbox restrictions and obtain microphone access. The Apple bulletin HT208849 confirms the vulnerability in macOS 10.13.4 and prior builds, with reme...

PT-2018-1359

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.13.5 Description The issue involves the "Grand Central Dispatch" component and allows attackers to bypass a sandbox protection mechanism. This is achieved by leveraging the misparsing of entitlement plists, which can...

CVE-2018-4091

CVE-2018-4091 refers to a Sandbox bypass in macOS High Sierra prior to 10.13.3. The affected product is macOS High Sierra (components include Sandbox), with the vulnerability allowing bypass of sandbox protections. Apple’s security update 2018-001 (macOS 10.13.3) addresses this issue along with o...

CVE-2018-4091: Undefined Security Weakness

An issue was discovered in certain Apple products. macOS before 10.13.3 is affected. The issue involves the "Sandbox" component. It allows bypass of a sandbox protection mechanism...

PT-2018-16383

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.13.3 Description An issue was discovered in macOS that involves the Sandbox component, allowing bypass of a sandbox protection mechanism. Recommendations For macOS versions prior to 10.13.3, update to version 10.13.3...

CVE-2018-1000058

Jenkins Pipeline: Supporting APIs Plugin 2.17 and earlier have an arbitrary code execution due to incomplete sandbox protection: Methods related to Java deserialization like readResolve implemented in Pipeline scripts were not subject to sandbox protection, and could therefore execute arbitrary...

Deserialization of untrusted data

Jenkins Pipeline: Supporting APIs Plugin 2.17 and earlier have an arbitrary code execution due to incomplete sandbox protection: Methods related to Java deserialization like readResolve implemented in Pipeline scripts were not subject to sandbox protection, and could therefore execute arbitrary...

CVE-2018-1000058

Jenkins Pipeline: Supporting APIs Plugin 2.17 and earlier have an arbitrary code execution due to incomplete sandbox protection: Methods related to Java deserialization like readResolve implemented in Pipeline scripts were not subject to sandbox protection, and could therefore execute arbitrary...