CVE-2017-7173

CVE-2017-7173 affects macOS kernel on macOS up to 10.13.2, allowing a crafted app to bypass kernel memory-read restrictions and read restricted kernel memory. Root cause involves memory handling/restrictions in the Kernel; impact is local, with potential unauthorized kernel memory disclosure. The...

CVE-2018-4090

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a...

CVE-2018-4090

CVE-2018-4090 affects Apple OSes including iOS < 11.2.5, macOS < 10.13.3, tvOS < 11.2.5, and watchOS

CVE-2018-4093

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a...

CVE-2017-7173

An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2018-4092

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Kernel" component. A race condition allows attackers to bypass intended memory-read...

CVE-2018-4084

An issue was discovered in certain Apple products. macOS before 10.13.3 is affected. The issue involves the "Wi-Fi" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2018-4104

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted...

CVE-2018-4138

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "NVIDIA Graphics Drivers" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2018-4138

CVE-2018-4138 affects macOS High Sierra before 10.13.4, targeting the NVIDIA Graphics Drivers. The issue is a memory-read restriction bypass via a crafted app, enabling a local attacker to read restricted memory. Root cause is a validation/memory handling issue in the NVIDIA Graphics Drivers comp...

CVE-2018-4104

CVE-2018-4104 affects Apple devices running iOS < 11.3, macOS < 10.13.4, tvOS < 11.3, and watchOS

CVE-2018-4092

CVE-2018-4092 affects Apple OS kernels across iOS, macOS, tvOS, and watchOS. The root cause is a race condition in the Kernel that can allow a crafted app to bypass memory-read restrictions. Affected versions include iOS before 11.2.5, macOS before 10.13.3, tvOS before 11.2.5, and watchOS before ...

CVE-2018-4084

CVE-2018-4084 affects macOS High Sierra predecessors up to 10.13.2, specifically the Wi‑Fi component. The issue allows a crafted app to bypass memory-read restrictions, enabling potential access to restricted memory via a local exploit (UI interaction required). The CVSS data indicates a local at...

CVE-2018-4093

Summary: CVE-2018-4093 is a kernel-level memory-read bypass affecting Apple platforms. The vulnerability exists in the Kernel component across iOS before 11.2.5, macOS before 10.13.3, tvOS before 11.2.5, and watchOS before 4.2.2. The issue allows a crafted app to bypass memory-read restrictions a...

Important: 389-ds-base

Issue Overview: Authentication bypass due to lack of size check in slapictmemcmp function in chmalloc.c: It was found that 389-ds-base did not always handle internal hash comparison operations correctly during the authentication process. A remote, unauthenticated attacker could potentially use th...

CVE-2017-17306

Some Huawei Smartphones with software of VNS-L21AUTC555B141, VNS-L21C10B160, VNS-L21C66B160, VNS-L21C703B140 have an array out-of-bounds read vulnerability. Due to the lack verification of array, an attacker tricks a user into installing a malicious application, and the application can exploit th...

Google Android Qualcomm WLAN Information Disclosure Vulnerability (CNVD-2018-05991)

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA, with Qualcomm WLAN being one of the components used. Qualcomm WLAN is a wireless LAN component developed by Qualco...

CVE-2017-18058

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for wowbufpktlen in wmawowwakeuphostevent which is received from firmware leads to potential out of bounds memory read...

CVE-2017-18057

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for vdev id in wmanloscancmpevthandler, which is received from firmware, leads to potential out of bounds memory read...

CVE-2017-18060

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for respevent-vdevid in wmaunifiedbcntxstatuseventhandler, which is received from firmware, leads to potential out of bounds memory read...