CVE-2018-4387

CVE-2018-4387 affects Apple iOS prior to 12.1. Description: a lock-screen vulnerability allowing access to photos via Reply With Message on a locked device, addressed by improved state management. Affected: iOS versions before 12.1. Reported in multiple sources (NVD entry and Red Hat CVE page) wi...

CVE-2018-4383

CVE-2018-4383 is a memory corruption issue addressed by Apple in a security update. The description notes affected platforms as iOS, macOS Mojave, tvOS, and watchOS prior to the listed versions, with the fix described as improved state management. Connected Red Hat and Apple security entries corr...

CVE-2018-4389

CVE-2018-4389 is an UI-related inconsistency in macOS Mail (and related components) that was mitigated by updating macOS Mojave to 10.14.1. The issue affects macOS versions prior to 10.14.1, with an improved state-management fix applied in the Mojave 10.14.1 release. The vulnerability is describe...

CVE-2018-4369

A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1...

CVE-2018-4369

CVE-2018-4369 is a logic issue addressed with improved state management affecting NetworkExtension across Apple platforms. It affected iOS <12.1, macOS Mojave <10.14.1, tvOS <12.1, and watchOS

CVE-2018-4307

A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12, Safari 12...

CVE-2018-4307

CVE-2018-4307 describes a logic issue in Safari/Apple’s WebKit stack affecting iOS prior to 12 and Safari 12. The root cause is described as a state-management flaw; impact is characterized as a modest security risk (CVSS ~4.3) with network attack potential and user interaction required per the m...

CVE-2018-4279

An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to Safari 11.1.2...

CVE-2018-4279

CVE-2018-4279 corresponds to an inconsistent user interface vulnerability in Apple Safari, fixed in Safari 11.1.2. Affected product: Safari on macOS (OS X El Capitan 10.11.6, macOS Sierra 10.12.6, and macOS High Sierra 10.13.6) prior to version 11.1.2. Root cause: improved state management was im...

CVE-2018-4260

An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to iOS 11.4.1, Safari 11.1.2...

CVE-2018-4195

An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to Safari 12...

CVE-2018-4195

CVE-2018-4195 affects Safari prior to version 12. It is described as an inconsistent user interface issue addressed with improved state management. The vulnerability is addressed in Safari 12 security content (HT209109). Remediation is to upgrade to Safari 12 or later; no exploit details are prov...

CVE-2018-4216

A logic issue existed in the handling of call URLs. This issue was addressed with improved state management. This issue affected versions prior to iOS 11.4.1...

CVE-2018-4216

CVE-2018-4216 is a vulnerability described as a logic issue in the handling of call URLs in the iOS Phone component, addressed by improved state management. Affected product: Apple iOS versions prior to 11.4.1 (iPhone/iOS devices). Root cause: a logic/state-management flaw in URL handling within ...

Not just for Processing: How Kafka Streams as a Distributed Database Boosted our Reliability and Reduced Maintenance

The Apache Kafka Streams library is used by enterprises around the world to perform distributed stream processing on top of Apache Kafka. One aspect of this framework that is less talked about is its ability to store local state, derived from stream processing. In this blog post we describe how w...

CVE-2019-6223

A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer...

CVE-2019-6223

A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer...

Memory corruption

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3. Processing maliciously crafted web content may lead to arbitrary code execution...

Code injection

A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer...

CVE-2019-6223

A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer...