CVE-2018-4191

A memory corruption issue was addressed with improved validation. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

CVE-2018-4126

CVE-2018-4126 is an Apple memory-corruption issue affecting CFNetwork (and related memory handling paths) prior to the iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5, iTunes 12.9 for Windows, and iCloud for Windows 7.7 releases. The description in the initial entry states a memory corruption vuln...

CVE-2018-4203

CVE-2018-4203 describes an out-of-bounds read that was addressed by improved bounds checking. The Apple advisories indicate this affected multiple platforms prior to updates: iOS before 12, macOS Mojave 10.14, tvOS 12, and watchOS 5. The Red Hat entry reiterates the same issue and scope. Remediat...

CVE-2018-4145

CVE-2018-4145 is a memory-corruption vulnerability reported across Apple products. The consolidated description spans iOS, tvOS, watchOS, Safari, iTunes for Windows, and iCloud for Windows, indicating multiple memory corruption issues addressed through improved memory handling. Affected versions ...

CVE-2018-4191

CVE-2018-4191 is a memory corruption issue that Apple fixed by improving input/memory validation. Affects older releases prior to iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, and iCloud for Windows 7.7. Apple security notes enumerate multiple components (CFNetwork, CoreFoundati...

CVE-2018-4203

An out-of-bounds read was addressed with improved bounds checking. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5...

CVE-2018-4248

An out-of-bounds read was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2...

CVE-2017-7151

CVE-2017-7151 is a race condition addressed by Apple through additional validation, affecting multiple Apple platforms prior to their updates (iOS 11.2, macOS High Sierra 10.13.2/10.13.4, tvOS 11.2, watchOS 4.2, iTunes 12.7.2 for Windows). The connected Apple advisories attribute the CVE to CoreF...

CVE-2018-4191

A memory corruption issue was addressed with improved validation. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

About the security content of watchOS 4 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

CVE-2018-4407

A memory corruption issue was addressed with improved validation. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5...

CVE-2018-4407

CVE-2018-4407 is grounded in a heap-based memory corruption in Apple XNU’s AWDL path. The bug arises in IO80211AWDLPeer::parseAwdlSyncTreeTLV: TLV type 0x14 (SyncTree TLV) can overflow the 60-byte sync_tree_macs buffer into the adjacent heap, due to the TLV length being capped at 1024 but copied ...

CVE-2018-4344

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

Unspecified vulnerability in Apple watchOS Passcode component

Apple watchOS is an operating system for smartwatches from Apple.Passcode is one of the cryptographic components. A security vulnerability exists in the Passcode component of Apple watchOS versions prior to 5.2, which stems from a failure to erase an entered passcode after the device enters sleep...

About the security content of watchOS 5.2

About the security content of watchOS 5.2 This document describes the security content of watchOS 5.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

CVE-2019-6231

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to read restricted memory...

CVE-2019-6230

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3,macOS Mojave 10.14.3,tvOS 12.1.2,watchOS 5.1.3. A malicious application may be able to break out of its sandbox...

CVE-2019-6227

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-6224

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A remote attacker may be able to initiate a FaceTime call causing arbitrary code execution...

CVE-2019-6226

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution...