CVE-2017-7825

Several fonts on OS X display some Tibetan and Arabic characters as whitespace. When used in the addressbar as part of an IDN this can be used for domain name spoofing attacks. Note: This attack only affects OS X operating systems. Other operating systems are unaffected. This vulnerability affect...

CVE-2017-7763

Default fonts on OS X display some Tibetan characters as whitespace. When used in the addressbar as part of an IDN this can be used for domain name spoofing attacks. Note: This attack only affects OS X operating systems. Other operating systems are unaffected. This vulnerability affects Firefox 5...

CVE-2018-4224

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Security...

CVE-2018-4159

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Graphics Drivers" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2018-4187

An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. macOS before 10.13.4 Security Update 2018-001 is affected. The issue involves the "LinkPresentation" component. It allows remote attackers to spoof the UI via a crafted URL in a text message...

CVE-2018-4193

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Windows Server" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

Denial of Service Vulnerability in Multiple Apple Products (CNVD-2018-12244)

Apple iOS, macOS High Sierra, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; macOS High Sierra is a specialized operating system for Mac computers; tvOS is a smart TV operating system; watchOS is a smart watch operating system; and UIKit is one o...

Input validation vulnerability in multiple Apple products

Apple iOS, macOS High Sierra, tvOS, and watchOS are products of Apple Inc. Apple iOS is a suite of operating systems for mobile devices; macOS High Sierra is a specialized operating system for Mac computers; tvOS is a smart TV operating system; and watchOS is a smart watch operating system.Messag...

Apple macOS High Sierra memory corruption vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.IOGraphics is one of the input and output graphics components. A security vulnerability exists in the IOGraphics component in Apple macOS High Sierra versions prior to 10.13.5. The vulnerability can be...

Apple macOS High Sierra memory corruption vulnerability (CNVD-2018-12245)

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Windows Server is one of the Window Server components. A security vulnerability exists in the Windows Server component of Apple macOS High Sierra versions prior to 10.13.5. The vulnerability can be...

Apple macOS High Sierra PDFKit Security Bypass Vulnerability

Apple macOS High Sierra is the United States Apple Apple company's set of Mac computers developed specifically for the operating system. PDFKit is one of the PDF document generation components. A security vulnerability exists in the PDFKit component in Apple macOS High Sierra versions prior to...

Apple macOS High Sierra CoreTypes Unauthorized Operation Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.CoreTypes is one of the core types of components. A security vulnerability exists in the CoreTypes component in Apple macOS High Sierra versions prior to 10.13.4 and versions prior to 10.13. A remote...

Apple macOS High Sierra LaunchServices Security Bypass Vulnerability

Apple macOS High Sierra is a suite of specialized operating systems developed by Apple Inc. for Mac computers.LaunchServices is one of the components that opens other applications or documents using a running application. A security vulnerability exists in the LaunchServices component in Apple...

Multiple Apple Products File System Events Competitive Conditions Vulnerability

Apple iOS, macOS High Sierra, tvOS, and watchOS are products of Apple Inc. Apple iOS is a set of operating systems for mobile devices; macOS High Sierra is a specialized operating system for Mac computers; tvOS is a smart TV operating system; watchOS is a smart watch operating system; and File...

Apple iOS, macOS High Sierra and watchOS CoreFoundation Competitive Conditions Vulnerability

Apple iOS, macOS High Sierra, and watchOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; macOS High Sierra is a specialized operating system for Mac computers; and watchOS is a smartwatch operating system. CoreFoundation is one of the core functional components. A...

CVE-2018-4174

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "Mail" component. It allows man-in-the-middle attackers to read S/MIME encrypted messages by leveraging an inconsistency in the user interface...

CVE-2018-4131

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "WindowServer" component. It allows attackers to bypass the Secure Input Mode protection mechanism, and log keystrokes of arbitrary apps, via a crafted app that...

CVE-2018-4098

An issue was discovered in certain Apple products. macOS before 10.13.3 is affected. The issue involves the "IOHIDFamily" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2018-4100

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. watchOS before 4.2.2 is affected. The issue involves the "LinkPresentation" component. It allows remote attackers to cause a denial of service resource consumption via a crafted tex...

Apple macOS High Sierra Notes Competitive Conditions Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Notes is a component of the application that modifies fonts. A competitive condition vulnerability exists in the Notes component in Apple macOS High Sierra versions prior to 10.13.4. An attacker can...