CVE-2018-4090

CVE-2018-4090 affects Apple OSes including iOS < 11.2.5, macOS < 10.13.3, tvOS < 11.2.5, and watchOS

CVE-2018-4146

CVE-2018-4146 affects Apple WebKit components across iOS, Safari, tvOS, watchOS, iCloud/Desktop WebKit stack. The issue allows memory corruption triggered by a crafted website, potentially causing a denial of service. Affected: iOS before 11.3; Safari before 11.1; iCloud on Windows before 7.4; iT...

CVE-2017-13885

An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It allows remote...

CVE-2018-4120

Affected software: Apple iOS prior to 11.3, Safari prior to 11.1, iCloud for Windows prior to 7.4, iTunes for Windows prior to 12.7.4, and tvOS prior to 11.3, all involving WebKit. Root cause: memory corruption in WebKit leading to remote code execution or denial of service via a crafted web site...

CVE-2018-4129

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit"...

CVE-2018-4096

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. Safari before 11.0.3 is affected. iCloud before 7.3 on Windows is affected. iTunes before 12.7.3 on Windows is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is...

CVE-2017-7003

CVE-2017-7003 – CoreText DoS in Apple platforms Affected products/versions (per public sources): iOS before 10.3.2; macOS before 10.12.5; tvOS before 10.2.1; watchOS before 3.2.2. The issue is in the CoreText component and allows a remote attacker to cause an application crash (denial of service)...

CVE-2018-4150

CVE-2018-4150 is a race condition in Apple’s XNU BPF subsystem that can trigger a linear heap buffer overflow when a buffer’s length is increased without reallocation. The described exploit path involves overflowing into a subsequent out-of-line (OOL) ports array, enabling a crafted heap state th...

CVE-2018-4124

CVE-2018-4124 affects Apple CoreText across iOS (<11.2.6), macOS (<10.13.3 Supplemental Update), tvOS (<11.2.6), and watchOS (

CVE-2018-4095

CVE-2018-4095 affects Core Bluetooth in Apple platforms: iOS before 11.2.5, tvOS before 11.2.5, and watchOS before 4.2.2. A crafted app can trigger a memory corruption issue to execute arbitrary code with system privileges or cause a denial of service. Apple’s security content for iOS 11.2.5, tvO...

CVE-2018-4113

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves a JavaScriptCore...

CVE-2018-4162

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit"...

CVE-2017-7005

CVE-2017-7005 concerns Apple’s WebKit/JavaScriptCore stack. On iOS (pre-10.3.2), Safari (pre-10.1.1), and tvOS (pre-10.2.1), this memory-corruption issue in JavaScriptCore could allow remote code execution or cause a denial of service via a crafted web site. The NVD entry notes a remote-code-exec...

CVE-2018-4146

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit"...

CVE-2018-4090

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a...

CVE-2017-7172

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "CFNetwork...

CVE-2017-2493

CVE-2017-2493 corresponds to a WebKit/Safari vulnerability where loading an HTMLObjectElement could bypass Same Origin Policy via crafted objects and JavaScript URLs, enabling potential cross-origin information leakage. The Seebug writeup provides a PoC and notes SOP checks in HTMLPlugInImageElem...

CVE-2018-4089

CVE-2018-4089 involves the WebKit component in several Apple platforms. According to Apple security content, affected products include iOS prior to 11.2.5, macOS prior to 10.13.3, Safari prior to 11.0.3, and tvOS prior to 11.2.5. The issue allows remote attackers to execute arbitrary code or caus...

CVE-2018-4109

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Graphics Driver" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of servic...

CVE-2017-13884

An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "WebKit"...