CVE-2018-4440

CVE-2018-4440 is described in the connected Apple advisories as a logic issue in Safari/WebKit that was fixed via improved state management. The Apple entries indicate the vulnerability affected Safari 12.0.2 and related components, and ties the impact to iOS 12.1.1, with iTunes 12.9.2 for Window...

CVE-2018-4447

CVE-2018-4447 is a memory corruption issue fixed by Apple through improved state management. The vulnerability affected multiple Apple platforms prior to the listed updates: iOS versions before 12.1.1, macOS Mojave before 10.14.2, tvOS before 12.1.1, and watchOS before 5.1.2. Apple’s security con...

CVE-2018-4438

CVE-2018-4438 is a memory-corruption vulnerability in WebKit/Safari affecting devices with iOS < 12.1.1, tvOS < 12.1.1, watchOS

CVE-2018-4430

CVE-2018-4430 describes a lock-screen vulnerability in iOS where an attacker could access contacts on a locked device. The Red Hat and NVD entries mirror the Apple advisory, stating the issue affected versions prior to iOS 12.1.1 and was addressed by improved state management. The Apple security ...

CVE-2018-4385

A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12.1...

CVE-2018-4383

A memory corruption issue was addressed with improved state management. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5...

CVE-2018-4389

An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to macOS Mojave 10.14.1...

CVE-2018-4387

A lock screen issue allowed access to photos via Reply With Message on a locked device. This issue was addressed with improved state management. This issue affected versions prior to iOS 12.1...

CVE-2018-4383

CVE-2018-4383 is a memory corruption issue addressed by Apple in a security update. The description notes affected platforms as iOS, macOS Mojave, tvOS, and watchOS prior to the listed versions, with the fix described as improved state management. Connected Red Hat and Apple security entries corr...

CVE-2018-4385

CVE-2018-4385 affects Apple iOS WebKit. The vulnerability is a logic issue tied to improved state management in WebKit, observed in iOS versions prior to 12.1. Public entries show two related WebKit notes for this CVE: one indicating a risk of address bar spoofing when visiting malicious websites...

CVE-2018-4387

CVE-2018-4387 affects Apple iOS prior to 12.1. Description: a lock-screen vulnerability allowing access to photos via Reply With Message on a locked device, addressed by improved state management. Affected: iOS versions before 12.1. Reported in multiple sources (NVD entry and Red Hat CVE page) wi...

CVE-2018-4389

CVE-2018-4389 is an UI-related inconsistency in macOS Mail (and related components) that was mitigated by updating macOS Mojave to 10.14.1. The issue affects macOS versions prior to 10.14.1, with an improved state-management fix applied in the Mojave 10.14.1 release. The vulnerability is describe...

CVE-2018-4369

A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1...

CVE-2018-4369

CVE-2018-4369 is a logic issue addressed with improved state management affecting NetworkExtension across Apple platforms. It affected iOS <12.1, macOS Mojave <10.14.1, tvOS <12.1, and watchOS

CVE-2018-4307

A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12, Safari 12...

CVE-2018-4307

CVE-2018-4307 describes a logic issue in Safari/Apple’s WebKit stack affecting iOS prior to 12 and Safari 12. The root cause is described as a state-management flaw; impact is characterized as a modest security risk (CVSS ~4.3) with network attack potential and user interaction required per the m...

CVE-2018-4279

An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to Safari 11.1.2...

CVE-2018-4279

CVE-2018-4279 corresponds to an inconsistent user interface vulnerability in Apple Safari, fixed in Safari 11.1.2. Affected product: Safari on macOS (OS X El Capitan 10.11.6, macOS Sierra 10.12.6, and macOS High Sierra 10.13.6) prior to version 11.1.2. Root cause: improved state management was im...

CVE-2018-4195

An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to Safari 12...

CVE-2018-4195

CVE-2018-4195 affects Safari prior to version 12. It is described as an inconsistent user interface issue addressed with improved state management. The vulnerability is addressed in Safari 12 security content (HT209109). Remediation is to upgrade to Safari 12 or later; no exploit details are prov...