CVE-2018-4383

A memory corruption issue was addressed with improved state management. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5...

CVE-2018-4385

A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12.1...

CVE-2018-4387

A lock screen issue allowed access to photos via Reply With Message on a locked device. This issue was addressed with improved state management. This issue affected versions prior to iOS 12.1...

CVE-2018-4383

CVE-2018-4383 is a memory corruption issue addressed by Apple in a security update. The description notes affected platforms as iOS, macOS Mojave, tvOS, and watchOS prior to the listed versions, with the fix described as improved state management. Connected Red Hat and Apple security entries corr...

CVE-2018-4385

CVE-2018-4385 affects Apple iOS WebKit. The vulnerability is a logic issue tied to improved state management in WebKit, observed in iOS versions prior to 12.1. Public entries show two related WebKit notes for this CVE: one indicating a risk of address bar spoofing when visiting malicious websites...

CVE-2018-4389

CVE-2018-4389 is an UI-related inconsistency in macOS Mail (and related components) that was mitigated by updating macOS Mojave to 10.14.1. The issue affects macOS versions prior to 10.14.1, with an improved state-management fix applied in the Mojave 10.14.1 release. The vulnerability is describe...

CVE-2018-4387

CVE-2018-4387 affects Apple iOS prior to 12.1. Description: a lock-screen vulnerability allowing access to photos via Reply With Message on a locked device, addressed by improved state management. Affected: iOS versions before 12.1. Reported in multiple sources (NVD entry and Red Hat CVE page) wi...

CVE-2018-4369

A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1...

CVE-2018-4369

CVE-2018-4369 is a logic issue addressed with improved state management affecting NetworkExtension across Apple platforms. It affected iOS <12.1, macOS Mojave <10.14.1, tvOS <12.1, and watchOS

CVE-2018-4307

A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12, Safari 12...

CVE-2018-4307

CVE-2018-4307 describes a logic issue in Safari/Apple’s WebKit stack affecting iOS prior to 12 and Safari 12. The root cause is described as a state-management flaw; impact is characterized as a modest security risk (CVSS ~4.3) with network attack potential and user interaction required per the m...

CVE-2018-4279

An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to Safari 11.1.2...

CVE-2018-4279

CVE-2018-4279 corresponds to an inconsistent user interface vulnerability in Apple Safari, fixed in Safari 11.1.2. Affected product: Safari on macOS (OS X El Capitan 10.11.6, macOS Sierra 10.12.6, and macOS High Sierra 10.13.6) prior to version 11.1.2. Root cause: improved state management was im...

CVE-2018-4260

An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to iOS 11.4.1, Safari 11.1.2...

CVE-2018-4195

CVE-2018-4195 affects Safari prior to version 12. It is described as an inconsistent user interface issue addressed with improved state management. The vulnerability is addressed in Safari 12 security content (HT209109). Remediation is to upgrade to Safari 12 or later; no exploit details are prov...

CVE-2018-4195

An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to Safari 12...

CVE-2018-4216

A logic issue existed in the handling of call URLs. This issue was addressed with improved state management. This issue affected versions prior to iOS 11.4.1...

CVE-2018-4216

CVE-2018-4216 is a vulnerability described as a logic issue in the handling of call URLs in the iOS Phone component, addressed by improved state management. Affected product: Apple iOS versions prior to 11.4.1 (iPhone/iOS devices). Root cause: a logic/state-management flaw in URL handling within ...

Not just for Processing: How Kafka Streams as a Distributed Database Boosted our Reliability and Reduced Maintenance

The Apache Kafka Streams library is used by enterprises around the world to perform distributed stream processing on top of Apache Kafka. One aspect of this framework that is less talked about is its ability to store local state, derived from stream processing. In this blog post we describe how w...

CVE-2018-4369: Improper Input Validation

A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1...