9053 matches found
CVE-2018-4088
An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. Safari before 11.0.3 is affected. iCloud before 7.3 on Windows is affected. iTunes before 12.7.3 on Windows is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is...
CVE-2018-4146
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit"...
CVE-2018-4162
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit"...
CVE-2018-4165
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. The issue involves the "WebKit" component. It allows remote attacker...
CVE-2017-7153
An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "WebKit"...
CVE-2017-7165
An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "WebKit"...
CVE-2018-4113
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves a JavaScriptCore...
CVE-2018-4114
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit"...
CVE-2018-4125
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit"...
CVE-2017-7164
An issue was discovered in certain Apple products. iOS before 11.2 is affected. tvOS before 11.2 is affected. The issue involves the "App Store" component. It allows man-in-the-middle attackers to spoof password prompts...
CVE-2018-4095
CVE-2018-4095 affects Core Bluetooth in Apple platforms: iOS before 11.2.5, tvOS before 11.2.5, and watchOS before 4.2.2. A crafted app can trigger a memory corruption issue to execute arbitrary code with system privileges or cause a denial of service. Apple’s security content for iOS 11.2.5, tvO...
CVE-2017-7003
CVE-2017-7003 – CoreText DoS in Apple platforms Affected products/versions (per public sources): iOS before 10.3.2; macOS before 10.12.5; tvOS before 10.2.1; watchOS before 3.2.2. The issue is in the CoreText component and allows a remote attacker to cause an application crash (denial of service)...
CVE-2017-13854
CVE-2017-13854 affects Apple kernels across iOS <11, macOS <10.13, tvOS <11, and watchOS
CVE-2018-4166
CVE-2018-4166 is tied to Apple’s NSURLSession in multiple OSes (iOS before 11.3, macOS before 10.13.4, tvOS before 11.3, watchOS before 4.3). The issue is described as a race condition in NSURLSession that could allow an attacker’s crafted app to execute arbitrary code in a privileged context. Ap...
CVE-2018-4120
Affected software: Apple iOS prior to 11.3, Safari prior to 11.1, iCloud for Windows prior to 7.4, iTunes for Windows prior to 12.7.4, and tvOS prior to 11.3, all involving WebKit. Root cause: memory corruption in WebKit leading to remote code execution or denial of service via a crafted web site...
CVE-2018-4150
CVE-2018-4150 is a race condition in Apple’s XNU BPF subsystem that can trigger a linear heap buffer overflow when a buffer’s length is increased without reallocation. The described exploit path involves overflowing into a subsequent out-of-line (OOL) ports array, enabling a crafted heap state th...
CVE-2018-4089
CVE-2018-4089 involves the WebKit component in several Apple platforms. According to Apple security content, affected products include iOS prior to 11.2.5, macOS prior to 10.13.3, Safari prior to 11.0.3, and tvOS prior to 11.2.5. The issue allows remote attackers to execute arbitrary code or caus...
CVE-2017-7005
CVE-2017-7005 concerns Apple’s WebKit/JavaScriptCore stack. On iOS (pre-10.3.2), Safari (pre-10.1.1), and tvOS (pre-10.2.1), this memory-corruption issue in JavaScriptCore could allow remote code execution or cause a denial of service via a crafted web site. The NVD entry notes a remote-code-exec...
CVE-2017-2493
CVE-2017-2493 corresponds to a WebKit/Safari vulnerability where loading an HTMLObjectElement could bypass Same Origin Policy via crafted objects and JavaScript URLs, enabling potential cross-origin information leakage. The Seebug writeup provides a PoC and notes SOP checks in HTMLPlugInImageElem...