Integer overflow

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves pktmnglripfilterinput in com.apple.packet-mangler in the "Kernel" component. It allows attackers to...

Memory corruption

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit"...

Memory corruption

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit"...

Buffer overflow

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Kernel" component. A buffer overflow in mptcpusrconnectx allows attackers to execute arbitrary...

Design/Logic Flaw

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Messages" component. It allows local users to perform impersonation attacks via an unspecified...

Type confusion

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit"...

CVE-2018-4192

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit"...

CVE-2018-4192

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit"...

CVE-2018-4201

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit"...

DEBIAN-CVE-2018-4201

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit"...

CVE-2018-4233

CVE-2018-4233 concerns a memory corruption/remote code execution bug in Apple’s WebKit (Safari/WebKit engine). The issue arises from a type confusion in the JavaScript JIT, notably involving the Proxy object, allowing an attacker to craft a page that triggers code execution. Affected products inc...

CVE-2018-4246

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit"...

CVE-2018-4235

CVE-2018-4235 is an injection-related issue in Apple’s Messages component that enables a local impersonation attack. It affects iOS 11.4, macOS 10.13.5, tvOS 11.4, and watchOS 4.3.1, as noted across Apple security updates. Root cause is an injection vulnerability in Messages handling that allows ...

CVE-2018-4214

CVE-2018-4214 concerns a memory corruption issue in WebKit used by Apple platforms. The vulnerability affects Apple products where WebKit handles crafted web content, notably iOS before 11.4 and Safari before 11.1.1, as well as iCloud/iTunes/watchOS/tvOS variants listed in Apple advisories. The d...

CVE-2018-4237

CVE-2018-4237 refers to a libxpc logic/memory issue in multiple Apple platforms (iOS ≤11.4, macOS ≤10.13.5, tvOS ≤11.4, watchOS ≤4.3.1). The Apple entries describe a privileged-elevation and potential arbitrary-code-execution impact via a crafted app, caused by a logic error in libxpc with a corr...

CVE-2018-4241

CVE-2018-4241 is an intra-object linear heap buffer overflow in Apple’s XNU kernel, specifically in mptcp_usr_connectx. The issue affects iOS prior to 11.4, macOS prior to 10.13.5, tvOS prior to 11.4, and watchOS prior to 4.3.1, and can lead to arbitrary code execution in kernel context via a cra...

CVE-2018-4222

CVE-2018-4222 affects WebKit components in multiple Apple platforms (iOS 11.4, Safari 11.1.1, iCloud/Win apps, tvOS/watchOS).根本原因：WebAssembly编译阶段的 getWasmBufferFromValue 的边界读取，WebKit 按错将数组缓冲区指针嵌入偏移，从而在读取表时产生越界。受影响的实现关键在于 WebAssembly 模块读取与内存/表的管理，导致在构造或执行 WebAssembly 模块时可能触发任意代码执行的潜在风险。公开的利用信息在 Pr...

CVE-2018-4206

CVE-2018-4206 affects Crash Reporter across Apple platforms: iOS <11.3.1, macOS <10.13.4, tvOS <11.4, watchOS

CVE-2018-4223

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Security" component. It allows local users to bypass intended restrictions on the reading of a...

CVE-2018-4225

CVE-2018-4225 affects multiple Apple platforms including iOS before 11.4, macOS before 10.13.5, iCloud for Windows before 7.5, iTunes for Windows before 12.7.5, and watchOS before 4.3.1. The issue, in the Security/Keychain component, allows a local user to bypass restrictions on Keychain state mo...