Code injection

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "kext tools" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app that performs kext loading...

CVE-2018-4144

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "Security"...

CVE-2018-4082

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or...

CVE-2017-7171

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "CoreAnimation" component. It allows attackers to execute arbitrary code in a privileged context o...

F5 Networks BIG-IP : Apache Tomcat 6.x vulnerabilities (K58084500)

The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote authenticated users to bypass intended SecurityManager restrictions and execute arbitrary code in a privilege...

The vulnerability of the HFS component of the Mac OS X operating system, which allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the HFS component of the Mac OS X operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context, or cause a service failure memory corruption...

The vulnerability of the CFNetwork component in the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the CFNetwork component in the Mac OS X operating system arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context, or to trigger a service failure...

The vulnerability of the Mac OS X operating system’s kernel allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the Mac OS X operating system’s kernel arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context, or cause a service failure memory corruption through a...

The vulnerability of the Sandbox component of the Mac OS X operating system allows a malicious actor to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the Sandbox component of the Mac OS X operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context remotely, or to trigger a service failure...

The vulnerability of the APFS component in the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the APFS component in the Mac OS X operating system arises from the execution of an operation outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context, or cause a service failure memory corruption...

The vulnerability of the CFNetwork component in the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the CFNetwork component in the Mac OS X operating system arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context, or to trigger a service failure...

The vulnerability of the fsck_msdos component in the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the fsckmsdos component of the Mac OS X operating system arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context, or cause a service failure memory corruption...

CVE-2017-7159

An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "IOAcceleratorFamily" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2017-13858

An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "IOKit" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app...

CVE-2017-13862

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause...

Code injection

An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "IOKit" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app...

The vulnerability of the IOFireWireFamily component in the Mac OS X operating system allows a hacker to execute arbitrary code in a privileged context or cause a service failure.

The vulnerability of the IOFireWireFamily component in the Mac OS X operating system arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context or cause a service failure memory corrupti...

The vulnerability of the SQLite component in operating systems such as Mac OS X and iOS, as well as in the iCloud service, allows a malicious actor to execute arbitrary code in a privileged context or cause a service failure.

The vulnerability of the SQLite component in operating systems such as Mac OS X and iOS, as well as in the iCloud service, arises from operations that occur outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged contexts or cau...

The vulnerability of the Wi-Fi component of the iOS operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the iOS operating system’s Wi-Fi component arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context or cause a service failure memory corruption by using specially...

The vulnerability of the Wi-Fi component of the iOS operating system allows a hacker to execute arbitrary code in a privileged context or cause a service failure.

The vulnerability of the iOS operating system’s Wi-Fi component arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context or trigger a service denial a situation known as a “race...