Memory corruption

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit"...

Design/Logic Flaw

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. watchOS before 4.2.2 is affected. The issue involves the "LinkPresentation" component. It allows remote attackers to cause a denial of service resource consumption via a crafted tex...

CVE-2017-13884

An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "WebKit"...

CVE-2018-4115

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves CFPreferences in the "System Preferences" component. It allows attackers to bypass intended access...

CVE-2018-4104

CVE-2018-4104 affects Apple devices running iOS < 11.3, macOS < 10.13.4, tvOS < 11.3, and watchOS

CVE-2018-4129

CVE-2018-4129 affects Apple's WebKit on multiple platforms (iOS 11.3, Safari 11.1, tvOS 11.3, watchOS 4.3, iCloud/iTunes on Windows). The issue is a memory-corruption vulnerability in WebKit that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website....

CVE-2018-4117

CVE-2018-4117 is a cross-origin fetch vulnerability in WebKit that could allow a crafted web site to bypass Same Origin Policy and exfiltrate data. Public references indicate affected products include Apple’s iOS Safari, watchOS, iCloud for Windows, and iTunes on Windows, with WebKit underlies th...

CVE-2017-7003

CVE-2017-7003 – CoreText DoS in Apple platforms Affected products/versions (per public sources): iOS before 10.3.2; macOS before 10.12.5; tvOS before 10.2.1; watchOS before 3.2.2. The issue is in the CoreText component and allows a remote attacker to cause an application crash (denial of service)...

CVE-2018-4122

CVE-2018-4122 involves memory-corruption in WebKit/JIT on Apple platforms. Affected: iOS < 11.3, Safari < 11.1, iCloud for Windows < 7.4, iTunes < 12.7.4, tvOS < 11.3, watchOS

CVE-2017-7172

CVE-2017-7172 affects the CFNetwork Session component across Apple products (iOS, macOS, tvOS, watchOS, and Windows iCloud/iTunes) with a memory corruption flaw that could allow an attacker to execute arbitrary code in a privileged context via a crafted app, or cause a denial of service. Apple’s ...

CVE-2017-13884

CVE-2017-13884 affects Apple products via the WebKit engine. The issue enables remote code execution or memory corruption crashes when processing specially crafted web content. Affected: iOS prior to 11.2, Safari prior to 11.0.2, iCloud on Windows, iTunes on Windows, tvOS prior to 11.2, watchOS p...

CVE-2018-4088

The CVE-2018-4088 entry maps to memory-corruption flaws in WebKit that could allow remote code execution via crafted web content in Apple platforms. Affected products include iOS before 11.2.5, macOS before 10.13.3, Safari before 11.0.3, iCloud/iTunes on Windows, tvOS before 11.2.5, and watchOS b...

CVE-2018-4100

CVE-2018-4100 affects Apple devices through the LinkPresentation component. A crafted text message may cause resource exhaustion leading to denial of service. Affected products include iOS prior to 11.2.5, macOS prior to 10.13.3, and watchOS prior to 4.2.2. Apple issued fixes in iOS 11.2.5, macOS...

CVE-2017-13854

An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denia...

CVE-2018-4087

CVE-2018-4087 concerns a memory corruption issue in the Core Bluetooth component affecting Apple platforms (iOS before 11.2.5, tvOS before 11.2.5, watchOS before 4.2.2). The root cause is a memory handling/memory corruption defect in Core Bluetooth that can allow an app to execute arbitrary code ...

CVE-2018-4090

CVE-2018-4090 affects Apple OSes including iOS < 11.2.5, macOS < 10.13.3, tvOS < 11.2.5, and watchOS

CVE-2018-4094

CVE-2018-4094 affects Apple devices (iOS <11.2.5, macOS <10.13.3, tvOS <11.2.5, watchOS

CVE-2018-4155

CVE-2018-4155 involves a race condition in the CoreFoundation component affecting iOS before 11.3, macOS before 10.13.4, tvOS before 11.3, and watchOS before 4.3. Exploitation would allow a crafted app to execute arbitrary code with elevated privileges in a privileged context. Apple security note...

CVE-2018-4144

CVE-2018-4144 involves a buffer overflow in the Security component that can allow arbitrary code execution in a privileged context via a crafted app. Affected products include iOS before 11.3, macOS before 10.13.4, iCloud for Windows before 7.4, iTunes for Windows before 12.7.4, tvOS before 11.3,...

CVE-2018-4162

CVE-2018-4162 affects Apple WebKit in multiple OS components (iOS before 11.3, Safari before 11.1, iCloud/iTunes on Windows, tvOS before 11.3, watchOS before 4.3). The issue enables remote code execution or memory-corruption–driven crashes via a crafted website, with WebKit memory-corruption as t...