CVE-2018-4159

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Graphics Drivers" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

Design/Logic Flaw

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Graphics Drivers" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2018-4159

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Graphics Drivers" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

Design/Logic Flaw

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2018-4159

CVE-2018-4159 affects macOS before 10.13.5, via the Graphics Drivers component. The issue allows a crafted app to bypass memory-read restrictions, enabling read access to restricted memory and potentially elevating risk locally on affected systems running macOS High Sierra 10.13.x. The CVE is doc...

CVE-2018-4253

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "AMD" component. It allows local users to bypass intended memory-read restrictions or cause a denial of service out-of-bounds read of kernel memory via a crafted app...

CVE-2018-4253

CVE-2018-4253 affects macOS High Sierra 10.13.x prior to 10.13.5, with the issue in the AMD subsystem. The vulnerability allows a local user to bypass memory-read restrictions or trigger a denial of service via an out‑of‑bounds read of kernel memory. Apple’s Security Update 2018-003 for macOS Hig...

CVE-2018-4141

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2018-4141

CVE-2018-4141 affects Apple macOS, specifically macOS 10.13.x prior to 10.13.5. The issue is in the Intel Graphics Driver and allows a crafted application to bypass memory-read restrictions, potentially exposing restricted memory. Verified details from Apple’s security content (HT208849) indicate...

CVE-2018-4159

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Graphics Drivers" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

Denial Of Service (DoS)

libjasper.so is vulnerable to denial of service DoS attacks. A malicious user can pass a JPC file to the jpcundoroi function in jpcdec.c to cause an invalid memory read, crashing the application...

SUSE SLES12 Security Update : git (SUSE-SU-2018:1566-1)

This update for git fixes several issues. These security issues were fixed : - CVE-2018-11233: Path sanity-checks on NTFS allowed attackers to read arbitrary memory bsc1095218 - CVE-2018-11235: Arbitrary code execution when recursively cloning a malicious repository bsc1095219 Note that Tenable...

chromium-browser: Out of bounds memory access in V8

Insufficient validation in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

chromium-browser: Heap buffer overflow in Skia

Insufficient validation of an image filter in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory read via a crafted HTML page...

SUSE-SU-2018:1566-1 Security update for git

This update for git fixes several issues. These security issues were fixed: - CVE-2018-11233: Path sanity-checks on NTFS allowed attackers to read arbitrary memory bsc1095218 - CVE-2018-11235: Arbitrary code execution when recursively cloning a malicious repository bsc1095219...

The Sleuth Kit Buffer Overflow Vulnerability (CNVD-2018-14710)

The Sleuth Kit TSK is a collection of data forensic tools developed by software developer Brian Carrier. The tools are able to analyze file systems such as FAT, NTFS, UFS, etc. and provide detailed information about the file system, including deleted data. A buffer overflow vulnerability exists i...

Important: git

Issue Overview: In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, code to sanity-check pathnames on NTFS can result in reading out-of-bounds memory.CVE-2018-11233 In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16...

Philips IntelliVue Patient and Avalon Fetal Monitors Information Exposure Vulnerability

Philips IntelliVue Patient Monitors MP2 and others are products of the Dutch company Philips.Philips IntelliVue Patient Monitors MP2 is a patient monitor device of the MP series.Avalon Fetal/Maternal The Avalon Fetal/Maternal Monitors FM20 is a maternal/infant monitor. An information exposure...

Philips IntelliVue Patient and Avalon Fetal Monitors Buffer Overflow Vulnerability

Philips IntelliVue Patient Monitors MP2 and others are products of the Dutch company Philips.Philips IntelliVue Patient Monitors MP2 is a patient monitor device of the MP series.Avalon Fetal/Maternal The Avalon Fetal/Maternal Monitors FM20 is a maternal/infant monitor. A buffer overflow...

openSUSE Security Update : git (openSUSE-2018-557)

This update for fixes the following security issues : - path sanity-checks on NTFS can read arbitrary memory CVE-2018-11233, boo1095218 - arbitrary code execution when recursively cloning a malicious repository CVE-2018-11235, boo1095219 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...