CVE-2018-4436

A certificate validation issue existed in configuration profiles. This was addressed with additional checks. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2...

CVE-2018-4425

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5...

CVE-2018-4426

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5...

CVE-2018-4426

CVE-2018-4426 is an Apple memory corruption vulnerability affecting pre-12.x macOS Mojave, iOS 12, tvOS 12 and watchOS 5, addressed by Apple in subsequent security updates. The description states the issue was mitigated by improved memory handling. Public documentation in connected items confirms...

CVE-2018-4431

A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2...

CVE-2018-4425

CVE-2018-4425 describes a memory corruption issue fixed by Apple with improved memory handling. The vulnerability affected Apple platforms prior to macOS Mojave 10.14, iOS 12, tvOS 12, and watchOS 5. The Red Hat entry and Apple advisories confirm the issue’s presence across multiple OS components...

CVE-2018-4414

A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5, iTunes 12.9 for Windows, iCloud for Windows 7.7...

CVE-2018-4413

CVE-2018-4413 affects Apple platforms (iOS prior to 12.1, macOS Mojave before 10.14.1, tvOS before 12.1, watchOS before 5.1) and is described as a memory initialization issue addressed by improved memory handling. Root cause: memory initialization. Impact is cited as high confidentiality impact w...

CVE-2018-4412

CVE-2018-4412: Apple memory-corruption issue fixed with improved input validation. Affected: iOS

CVE-2018-4420

CVE-2018-4420 describes a memory corruption issue resolved by removing the vulnerable code. The vulnerability affected Apple platforms up to the listed patches and versions: iOS

CVE-2018-4429

This CVE (CVE-2018-4429) concerns a spoofing vulnerability in the handling of URLs within Apple’s LinkPresentation component. Affected software includes iOS versions prior to 12.1.1 and watchOS prior to 5.1.2, where input handling could be spoofed via malicious content (e.g., emails) leading to U...

CVE-2018-4416

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8...

CVE-2018-4395

CVE-2018-4395 affects Apple ecosystems (iOS before 12, macOS Mojave 10.14 before patch, tvOS 12, watchOS 5). The issue was addressed with improved checks; impact per CVE indicates local attack vector with partial availability impact and, in CVSSv3, a medium severity (5.5) with high impact on avai...

CVE-2018-4401

CVE-2018-4401 is an Apple-family memory corruption vulnerability addressed by Apple in 2018 security updates. Affected products/versions include iOS prior to 12, macOS Mojave 10.14, tvOS 12, and watchOS 5. The issue was mitigated by Apple through memory-management fixes in the corresponding secur...

CVE-2018-4401

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5...

CVE-2018-4400

A validation issue was addressed with improved logic. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, watchOS 5.1...

CVE-2018-4399

CVE-2018-4399 is a kernel/privilege-related issue affecting Apple platforms prior to the patches in iOS 12, macOS Mojave 10.14, tvOS 12, and watchOS 5. The Red Hat advisory confirms an access issue with privileged API calls and notes affected versions before those updates. The Apple advisories HT...

CVE-2018-4377

The CVE describes a cross-site scripting (XSS) issue in Safari via malformed URLs that could affect Safari on iOS, watchOS, macOS (Safari 12.0.1) and related Apple apps (iTunes 12.9.1, iCloud for Windows 7.8). Root cause: insufficient URL validation. Impact during exploitation is an XSS condition...

CVE-2018-4377

A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affected versions prior to iOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8...

CVE-2018-4386

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8...