CVE-2018-4334

CVE-2018-4334 is a memory corruption issue reported by Apple affecting macOS before Mojave 10.14. The Red Hat/Apple security entries and the OpenVAS/NVD records confirm the vulnerability relates to memory handling improvements and memory corruption in affected components (notably seen in the Inte...

CVE-2018-4348

A validation issue was addressed with improved logic. This issue affected versions prior to macOS Mojave 10.14...

CVE-2018-4325

CVE-2018-4325 affects iOS prior to 12, tied to the Status Bar component. The issue is described as a logic issue addressed by improved restrictions. Red Hat and CNVD entries align with a local-access impact related to discovering the last used app from the lock screen; no public exploit details a...

CVE-2018-4340

CVE-2018-4340 is a memory corruption vulnerability addressed by Apple across multiple platforms. The issue affected macOS Mojave 10.14 and earlier, iOS prior to 12, watchOS 5, and tvOS 12, arising from memory handling that could be exploited locally. Red Hat’s CVE entry reiterates the same descri...

CVE-2018-4343

CVE-2018-4343 is an Apple memory corruption vulnerability affecting prior to iOS 12, macOS Mojave 10.14, tvOS 12, and watchOS 5. The description indicates a memory handling fix was applied. Connected Red Hat/Apple entries corroborate a memory corruption issue (no exploitation details provided). R...

CVE-2018-4332

CVE-2018-4332 is a memory corruption vulnerability in the Heimdal component identified by Apple advisories for multiple Apple OSes. The issue affected iOS (versions before 12), macOS Mojave 10.14, tvOS 12, and watchOS 5, and was addressed via memory-management hardening in the corresponding Apple...

CVE-2018-4290

A denial of service issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, watchOS 4.3.2...

CVE-2018-4319

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue affected versions prior to iOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

CVE-2018-4308

CVE-2018-4308 is an out-of-bounds read affecting macOS prior to Mojave 10.14, mitigated by improved bounds checking in ATS. Remediation: upgrade to macOS Mojave 10.14 or later (HT209139; Mojave 10.14.1 provided in HT209193). Exploitation status is not disclosed in the provided documents.

CVE-2018-4319

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue affected versions prior to iOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

CVE-2018-4275

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1...

CVE-2018-4280

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2...

CVE-2018-4275

CVE-2018-4275 is a memory corruption vulnerability affecting Apple iOS versions older than 11.4.1. Multiple sources (NVD entry and Red Hat/NVD cross-references) describe the issue as a memory corruption flaw addressed by improved memory handling, with Apple listing iOS 11.4.1 as the patched relea...

CVE-2018-4203

An out-of-bounds read was addressed with improved bounds checking. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5...

CVE-2018-4191

A memory corruption issue was addressed with improved validation. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

CVE-2018-4216

A logic issue existed in the handling of call URLs. This issue was addressed with improved state management. This issue affected versions prior to iOS 11.4.1...

CVE-2018-4344

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

openSUSE Security Update : xen (openSUSE-2019-418) (Meltdown) (Spectre)

This update for xen to version 4.10.1 fixes several issues bsc1027519. These security issues were fixed : - CVE-2018-3639: Prevent attackers with local user access from extracting information via a side-channel analysis, aka Speculative Store Bypass SSB, Variant 4 bsc1092631. -...

OPENSUSE-SU-2019:0308-1 Security update for webkit2gtk3

This update for webkit2gtk3 to version 2.22.6 fixes the following issues boo1124937 boo1119558: Security vulnerabilities fixed: - CVE-2018-4437: Processing maliciously crafted web content may lead to arbitrary code execution. Multiple memory corruption issues were addressed with improved memory...

SUSE-SU-2019:0651-1 Security update for go1.11

This update for go1.11 to version 1.11.5 fixes the following issues: Security issue fixed: - CVE-2019-6486: Fixed a CPU Denial-of-Service vulnerability affecting crypto/ellpitic related to P-521 and P-384 bsc1123013 go29903. Other bug fixes and changes made: - Fix erroneous trailing backslash in...