CVE-2018-4401

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5...

CVE-2018-4392

CVE-2018-4392 refers to multiple memory corruption issues in Apple products that were addressed by improved memory handling. Public details show impact on iOS, tvOS, watchOS, Safari, iTunes, and iCloud for Windows before the corresponding patches. Affected versions (per sources) include iOS < ...

CVE-2018-4400

CVE-2018-4400 is a validation issue addressed by Apple in the macOS/iOS/watchOS stack. The vulnerability affected versions prior to iOS 12.1, macOS Mojave 10.14.1, and watchOS 5.1, with impact arising while processing certain signed S/MIME messages, described as a validation input issue that coul...

CVE-2018-4377

A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affected versions prior to iOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8...

CVE-2018-4382

CVE-2018-4382 corresponds to multiple memory corruption issues found in Apple software. The connected Nessus entries corroborate a memory corruption vulnerability affecting Apple Safari and related components, with affected versions including iOS prior to 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0...

CVE-2018-4382

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8...

CVE-2018-4386

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8...

CVE-2018-4398

CVE-2018-4398 affects Apple platforms and is tied to the Miller–Rabin primality test weakness in CoreCrypto. The issue exists in the prime-number testing method and could lead to incorrect primality conclusions for certain inputs. Apple’s patches address this by switching to pseudorandom bases fo...

CVE-2018-4383

A memory corruption issue was addressed with improved state management. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5...

CVE-2018-4386

CVE-2018-4386 is a memory corruption issue affecting Apple platforms prior to the listed updates. Publicly referenced in Apple advisories for iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, and iCloud for Windows 7.8, the vulnerability is described as multiple memory corruption is...

CVE-2018-4395

CVE-2018-4395 affects Apple ecosystems (iOS before 12, macOS Mojave 10.14 before patch, tvOS 12, watchOS 5). The issue was addressed with improved checks; impact per CVE indicates local attack vector with partial availability impact and, in CVSSv3, a medium severity (5.5) with high impact on avai...

CVE-2018-4408

CVE-2018-4408 is an Apple memory-corruption vulnerability caused by insufficient input validation. It affects multiple Apple platforms (iOS, macOS, tvOS, watchOS) with the issue described as a memory corruption due to input validation weaknesses; Apple advisories indicate patches/liberation via i...

CVE-2018-4378

CVE-2018-4378 affects Apple products prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, and iCloud for Windows 7.8. It is described as a memory corruption issue mitigated by improved input validation. No explicit root cause or exploit details are given in the connected docum...

CVE-2018-4399

CVE-2018-4399 is a kernel/privilege-related issue affecting Apple platforms prior to the patches in iOS 12, macOS Mojave 10.14, tvOS 12, and watchOS 5. The Red Hat advisory confirms an access issue with privileged API calls and notes affected versions before those updates. The Apple advisories HT...

CVE-2018-4398

An issue existed in the method for determining prime numbers. This issue was addressed by using pseudorandom bases for testing of primes. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1, iTunes 12.9.1, iCloud for Windows 7.8...

CVE-2018-4377

The CVE describes a cross-site scripting (XSS) issue in Safari via malformed URLs that could affect Safari on iOS, watchOS, macOS (Safari 12.0.1) and related Apple apps (iTunes 12.9.1, iCloud for Windows 7.8). Root cause: insufficient URL validation. Impact during exploitation is an XSS condition...

CVE-2018-4401

CVE-2018-4401 is an Apple-family memory corruption vulnerability addressed by Apple in 2018 security updates. Affected products/versions include iOS prior to 12, macOS Mojave 10.14, tvOS 12, and watchOS 5. The issue was mitigated by Apple through memory-management fixes in the corresponding secur...

CVE-2018-4361

CVE-2018-4361 is a memory consumption issue addressed by improved memory handling. The vulnerability affects multiple Apple platforms and components prior to the listed versions: iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, and iCloud for Windows 7.7. The description in the ini...

CVE-2018-4373

CVE-2018-4373 relates to multiple memory corruption issues addressed by Apple with improved memory handling. The vulnerability affected iOS prior to 12.1, watchOS prior to 5.1, Safari prior to 12.0.1, iTunes prior to 12.9.1, and iCloud for Windows prior to 7.8. Apple notes patches in iOS 12.1, wa...

CVE-2018-4369

A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1...