Design/Logic Flaw

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

Design/Logic Flaw

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

Design/Logic Flaw

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "QuickTime" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

Design/Logic Flaw

An out-of-bounds read issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows local users to bypass intended memory-read restrictions...

Design/Logic Flaw

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-13782

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a /dev/dtracehelper attack involving the dtracedifvariable and dtracegetarg functions...

Design/Logic Flaw

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

Design/Logic Flaw

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "CFString" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

Design/Logic Flaw

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a /dev/dtracehelper attack involving the dtracedifvariable and dtracegetarg functions...

CVE-2017-13782

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a /dev/dtracehelper attack involving the dtracedifvariable and dtracegetarg functions...

Design/Logic Flaw

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Quick Look" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-13821

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "CFString" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-13841

Summary: CVE-2017-13841 affects macOS before 10.13.1, in the Kernel, enabling an attacker to bypass memory-read restrictions via a crafted app. The issue is documented across the NVD/NVD description and Apple security updates entries, which associate the vulnerability with kernel memory access an...

CVE-2017-13842

The CVE-2017-13842 entry applies to Apple macOS Kernel on affected systems prior to macOS 10.13.1, where a crafted app can bypass memory-read restrictions, enabling a local attacker to read restricted memory. This is described as a memory-read bypass in the Kernel component with a mitigating patc...

CVE-2017-13818

CVE-2017-13818 affects macOS prior to 10.13.1, specifically the Kernel. A crafted app can bypass memory-read restrictions, effectively reading restricted kernel memory. This is a local bypass vulnerability; the issue is documented by NVD/NIST with Apple references. Remediation: update macOS to 10...

CVE-2017-13836

CVE-2017-13836 affects macOS pre-10.13.1, in the Kernel, allowing a crafted app to bypass memory-read restrictions. The issue is mitigated by upgrading to macOS 10.13.1 or later (no other remediation details provided). Exploitation status/exploit specifics are not disclosed in the provided docume...

CVE-2017-13823

CVE-2017-13823 affects macOS prior to 10.13.1, specifically the QuickTime component, enabling bypass of memory-read restrictions via a crafted app. The issue is documented by Apple in the macOS High Sierra 10.13.1 security update (HT208221) and listed among affected components; Apple notes the up...

CVE-2017-13821

CVE-2017-13821 affects macOS (pre-10.13.1) and involves the CFString component, allowing a crafted app to bypass memory-read restrictions. Public details present in Apple security content entries reference CVE-2017-13821 and indicate the vulnerability in the CFString path; the initial description...

CVE-2017-13840

CVE-2017-13840 affects macOS before 10.13.1 in the Kernel component. A crafted app can bypass memory-read restrictions, potentially exposing restricted memory. Remediation: upgrade to macOS 10.13.1 (or later) as provided by Apple.

CVE-2017-13817

An out-of-bounds read issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows local users to bypass intended memory-read restrictions...