CVE-2018-4313

A consistency issue existed in the handling of application snapshots. The issue was addressed with improved handling of message deletions. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5...

CVE-2018-4313

CVE-2018-4313 concerns a consistency issue in how application snapshots are handled in Messages, allowing a local user to potentially discover a user’s deleted messages. The issue affected iOS prior to 12, tvOS prior to 12, and watchOS prior to 5. Apple documented the vulnerability in its securit...

CVE-2018-4311

CVE-2018-4311 is a WebKit-related issue mitigated by removing origin information. Affected products/versions include iOS <12, watchOS <5, Safari <12, iTunes on Windows <12.9, and iCloud for Windows

CVE-2018-4305

CVE-2018-4305 is an Apple security issue described as an input validation problem, addressed by improved input validation. The initial document notes the vulnerability affects versions prior to iOS 12, tvOS 12, and watchOS 5. Connected Apple advisories (HT209106/HT209107/HT209108) corroborate mul...

CVE-2018-4304

CVE-2018-4304 is a denial-of-service vulnerability tied to Apple’s input validation in text handling. According to the Apple advisories, affected products include iOS prior to 12, macOS Mojave 10.14, tvOS 12, and watchOS 5. The root cause is an input/validation issue that could be exploited to di...

CVE-2018-4299

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

CVE-2018-4319

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue affected versions prior to iOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

CVE-2018-4311

The issue was addressed by removing origin information. This issue affected versions prior to iOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

CVE-2018-4272

CVE-2018-4272 corresponds to multiple memory corruption issues in Apple's WebKit components affecting iOS, tvOS, watchOS, Safari, and related Windows apps. The documented impact is high in CVSS terms, with vulnerable components including WebKit memory handling across iOS 11.x, tvOS 11.x, watchOS ...

CVE-2018-4270

CVE-2018-4270 is a WebKit/WebKit2GTK memory corruption vulnerability. The public description indicates a memory corruption issue addressed with improved memory handling affecting multiple Apple components: iOS prior to 11.4.1, tvOS prior to 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Wi...

CVE-2018-4264

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6...

CVE-2018-4282

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2...

CVE-2018-4271

Multiple memory corruption issues were addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6...

CVE-2018-4284

CVE-2018-4284 describes a type confusion vulnerability that was addressed with improved memory handling. It affected multiple Apple software versions prior to patches: iOS 11.4.1 and earlier, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, and iCloud for Windows 7.6. The initi...

CVE-2018-4273

Multiple memory corruption issues were addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6...

CVE-2018-4269

A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2, iTunes 12.8 for Windows, iCloud for Windows 7.6...

CVE-2018-4264

CVE-2018-4264 is a memory corruption issue in Apple WebKit/WebKit-derived components that affects multiple Apple platforms and associated desktop/mobile apps. Affected products/areas include iOS, tvOS, watchOS, Safari 11.1.2, iTunes 12.8 for Windows, and iCloud for Windows 7.6, with the vulnerabi...

CVE-2018-4266

A race condition was addressed with additional validation. This issue affected versions prior toiVersions prior to: OS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6...

CVE-2018-4282

CVE-2018-4282 is an Apple kernel local information-disclosure vulnerability: an out-of-bounds read could disclose kernel memory in iOS prior to 11.4.1, tvOS prior to 11.4.1, and watchOS prior to 4.3.2. The root cause is an input validation deficiency that allowed reading beyond bounds. Apple addr...

CVE-2018-4284

A type confusion issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6...