CVE-2018-4143

CVE-2018-4143 affects Apple kernels across iOS (pre-11.3), macOS (pre-10.13.4), tvOS (pre-11.3), and watchOS (pre-4.3). Root cause: memory corruption in the Kernel enabling a crafted app to execute arbitrary code with kernel privileges or cause a denial of service. Public details confirm the issu...

CVE-2018-4142

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "CoreText" component. It allows remote attackers to cause a denial of service application crash vi...

CVE-2018-4142

CVE-2018-4142 affects Apple devices running iOS < 11.3, macOS < 10.13.4, tvOS < 11.3, and watchOS

CVE-2018-4157

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "Quick Look" component. A race condition allows attackers to execute arbitrary code in a privilege...

CVE-2018-4157

CVE-2018-4157 affects Apple: iOS < 11.3, macOS < 10.13.4, tvOS < 11.3, and watchOS

CVE-2018-4161

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit"...

CVE-2018-4161

CVE-2018-4161 concerns WebKit in Apple's iOS (≤11.3), Safari (≤11.1), iCloud/iTunes on Windows, tvOS, watchOS. It allows remote code execution or memory corruption causing app crash via a crafted website; root cause is memory corruption in WebKit. Affected products are Apple devices using WebKit/...

CVE-2018-4155

CVE-2018-4155 involves a race condition in the CoreFoundation component affecting iOS before 11.3, macOS before 10.13.4, tvOS before 11.3, and watchOS before 4.3. Exploitation would allow a crafted app to execute arbitrary code with elevated privileges in a privileged context. Apple security note...

CVE-2018-4093

Summary: CVE-2018-4093 is a kernel-level memory-read bypass affecting Apple platforms. The vulnerability exists in the Kernel component across iOS before 11.2.5, macOS before 10.13.3, tvOS before 11.2.5, and watchOS before 4.2.2. The issue allows a crafted app to bypass memory-read restrictions a...

CVE-2018-4092

CVE-2018-4092 affects Apple OS kernels across iOS, macOS, tvOS, and watchOS. The root cause is a race condition in the Kernel that can allow a crafted app to bypass memory-read restrictions. Affected versions include iOS before 11.2.5, macOS before 10.13.3, tvOS before 11.2.5, and watchOS before ...

CVE-2018-4095

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Core Bluetooth" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service...

CVE-2018-4109

CVE-2018-4109 affects Apple platforms via the Graphics Driver. A memory corruption issue in the Graphics Driver could allow a crafted app to execute arbitrary code with kernel privileges or cause a denial of service. Affected products are iOS before 11.2.5, tvOS before 11.2.5, and watchOS before ...

CVE-2018-4082

CVE-2018-4082 affects Apple devices across iOS, macOS, tvOS, and watchOS where the Kernel component is vulnerable. The issue allows an attacker with a crafted app to cause memory corruption, potentially enabling arbitrary code execution in a privileged context or a denial of service. Publicly doc...

CVE-2018-4167

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "File System Events" component. A race condition allows attackers to execute arbitrary code in a...

CVE-2018-4100

CVE-2018-4100 affects Apple devices through the LinkPresentation component. A crafted text message may cause resource exhaustion leading to denial of service. Affected products include iOS prior to 11.2.5, macOS prior to 10.13.3, and watchOS prior to 4.2.2. Apple issued fixes in iOS 11.2.5, macOS...

CVE-2017-13873

CVE-2017-13873 is a kernel information-disclosure issue affecting Apple devices (iOS before 11, macOS before 10.13, tvOS before 11, watchOS before 4). An attacker could craft an app to obtain sensitive network-activity information about other apps, via exploitation of a memory/logic issue in the ...

CVE-2018-4104

CVE-2018-4104 affects Apple devices running iOS < 11.3, macOS < 10.13.4, tvOS < 11.3, and watchOS

CVE-2018-4162

CVE-2018-4162 affects Apple WebKit in multiple OS components (iOS before 11.3, Safari before 11.1, iCloud/iTunes on Windows, tvOS before 11.3, watchOS before 4.3). The issue enables remote code execution or memory-corruption–driven crashes via a crafted website, with WebKit memory-corruption as t...

CVE-2018-4122

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit"...

CVE-2018-4117

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. watchOS before 4.3 is affected. The issue involves the fetch API in the "WebKit" component. It...