CVE-2018-4400

CVE-2018-4400 is a validation issue addressed by Apple in the macOS/iOS/watchOS stack. The vulnerability affected versions prior to iOS 12.1, macOS Mojave 10.14.1, and watchOS 5.1, with impact arising while processing certain signed S/MIME messages, described as a validation input issue that coul...

CVE-2018-4333

A validation issue was addressed with improved input sanitization. This issue affected versions prior to iOS 12, macOS Mojave 10.14...

CVE-2018-4338

A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10.14...

CVE-2018-4346

A validation issue existed which allowed local file access. This was addressed with input sanitization. This issue affected versions prior to macOS Mojave 10.14...

CVE-2018-4348

A validation issue was addressed with improved logic. This issue affected versions prior to macOS Mojave 10.14...

CVE-2018-4338

CVE-2018-4338 affects macOS versions prior to Mojave 10.14. The vulnerability is described as a validation/input sanitization issue in Bluetooth. The impact, as stated in Apple’s advisory, is that an attacker in a privileged network position could intercept Bluetooth traffic. Apple lists Mojave 1...

CVE-2018-4348

CVE-2018-4348 has concrete details in connected docs: a validation issue in the macOS Login Window component affecting versions prior to macOS Mojave 10.14, addressed by improved validation logic. Remediation per Apple: update to macOS Mojave 10.14.1 or later (security updates listed as HT209193/...

CVE-2018-4346

CVE-2018-4346 involves a validation issue that allowed local file access on macOS versions prior to Mojave 10.14. The condition originated from insufficient input validation; Apple addressed it with input sanitization. Affected components are tied to macOS security updates, including the Mojave-e...

CVE-2018-4335

CVE-2018-4335 affects Apple iOS where the IOMobileFrameBuffer component had a validation issue that allowed reading restricted memory. The root cause is an input/validation defect that was fixed by improved input sanitization. Affected products/versions: iOS versions before 12.0 (iPhone/iPad/touc...

CVE-2018-4321

CVE-2018-4321 involves a validation issue in the entitlement verification which affected Apple platforms prior to their patches: iOS 12, macOS Mojave 10.14, and tvOS 12. The issue was addressed with improved validation of the process entitlement. Affected components are tied to the entitlement ve...

About the security content of macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

PT-2019-10923

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 10.14 Description: A validation issue was addressed with improved input sanitization. Recommendations: For versions prior to 10.14, update to macOS Mojave 10.14 or later to resolve the issue...

PT-2019-10866

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 12 Description: A validation issue was addressed with improved input sanitization. Recommendations: For versions prior to iOS 12, update to iOS 12 or later to resolve the issue...

PT-2019-10875

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 10.14 Description: A validation issue was addressed with improved logic. Recommendations: For versions prior to 10.14, update to macOS Mojave 10.14 or later to resolve the issue...

PT-2019-10912

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 12.1 macOS Mojave versions prior to 10.14.1 watchOS versions prior to 5.1 Description: A validation issue was addressed with improved logic. Recommendations: For iOS versions prior to 12.1, update to iOS 12.1 or later. F...

PT-2019-10864

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 12 macOS versions prior to 10.14 Description: A validation issue was addressed with improved input sanitization. Recommendations: For iOS versions prior to 12, update to iOS 12 or later. For macOS versions prior to 10.14...

CVE-2019-10672

treeRead in hdf/btree.c in libmysofa before 0.7 does not properly validate multiplications and additions...

CVE-2019-1743

A vulnerability in the web UI framework of Cisco IOS XE Software could allow an authenticated, remote attacker to make unauthorized changes to the filesystem of the affected device. The vulnerability is due to improper input validation. An attacker could exploit this vulnerability by crafting a...

CVE-2019-6732

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

DEBIAN-CVE-2019-6229

A logic issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to universal cross site scripting...