CVE-2018-4146

CVE-2018-4146 affects Apple WebKit components across iOS, Safari, tvOS, watchOS, iCloud/Desktop WebKit stack. The issue allows memory corruption triggered by a crafted website, potentially causing a denial of service. Affected: iOS before 11.3; Safari before 11.1; iCloud on Windows before 7.4; iT...

CVE-2018-4120

Affected software: Apple iOS prior to 11.3, Safari prior to 11.1, iCloud for Windows prior to 7.4, iTunes for Windows prior to 12.7.4, and tvOS prior to 11.3, all involving WebKit. Root cause: memory corruption in WebKit leading to remote code execution or denial of service via a crafted web site...

CVE-2018-4121

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit"...

CVE-2018-4096

CVE-2018-4096 is a WebKit memory-corruption issue exploited via a crafted web site, affecting multiple Apple platforms (iOS <11.2.5, macOS <10.13.3, Safari <11.0.3, iCloud/iTunes on Windows, tvOS <11.2.5, watchOS

CVE-2018-4119

CVE-2018-4119 affects Apple’s WebKit component across multiple platforms (iOS prior to 11.3, Safari prior to 11.1, iCloud/Windows and tvOS variants). The issue allows remote attacker code execution or a memory-corruption–driven DoS via a crafted website, caused by memory handling/memory-corruptio...

CVE-2017-7161

CVE-2017-7161 affects Safari/WebKit’s Web Inspector. An arbitrary code execution vulnerability exists in Safari before 11.0.2 due to a command-injection flaw triggered by crafting special characters in WebKit Web Inspector. Exploitation would allow a remote attacker to run arbitrary code on the a...

CVE-2017-7153

CVE-2017-7153 affects WebKit in multiple Apple platforms. The issue allows a crafted website to spoof UI by sending a 401 Unauthorized redirect, potentially deceiving users about TLS session validity. Affected products/versions include iOS prior to 11.2, Safari prior to 11.0.2, iCloud on Windows ...

CVE-2018-4125

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit"...

CVE-2018-4122

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit"...

CVE-2018-4133

An issue was discovered in certain Apple products. Safari before 11.1 is affected. The issue involves the "WebKit" component. A Safari cross-site scripting XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2018-4130

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. The issue involves the "WebKit" component. It allows remote attacker...

CVE-2018-4163

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit"...

CVE-2018-4117

CVE-2018-4117 is a cross-origin fetch vulnerability in WebKit that could allow a crafted web site to bypass Same Origin Policy and exfiltrate data. Public references indicate affected products include Apple’s iOS Safari, watchOS, iCloud for Windows, and iTunes on Windows, with WebKit underlies th...

CVE-2017-7165

An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "WebKit"...

CVE-2017-7153

An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "WebKit"...

CVE-2017-7161

An issue was discovered in certain Apple products. Safari before 11.0.2 is affected. The issue involves the "WebKit Web Inspector" component. It allows remote attackers to execute arbitrary code via special characters that trigger command injection...

CVE-2018-4127

CVE-2018-4127 affects Apple WebKit components across multiple Apple platforms (iOS < 11.3, Safari < 11.1, tvOS

CVE-2018-4121

CVE-2018-4121 involves WebKit in multiple Apple platforms (iOS, iPhone Safari, macOS Safari, iCloud for Windows, iTunes for Windows, tvOS, watchOS) and stems from memory corruption when processing crafted web content, allowing remote code execution. Apple’s security notes for Safari 11.1 and iOS ...

CVE-2017-7161

An issue was discovered in certain Apple products. Safari before 11.0.2 is affected. The issue involves the "WebKit Web Inspector" component. It allows remote attackers to execute arbitrary code via special characters that trigger command injection...

CVE-2018-4161

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit"...