CVE-2018-4293

CVE-2018-4293 is a cookie management issue in CFNetwork affecting iOS, macOS High Sierra, tvOS, watchOS, iTunes for Windows and iCloud for Windows; fixed by Apple in iOS 11.4.1 and macOS High Sierra 10.13.6 (Security Update 2018-004) with improved checks for cookies. The connected Red Hat/Apple s...

CVE-2018-4304

CVE-2018-4304 is a denial-of-service vulnerability tied to Apple’s input validation in text handling. According to the Apple advisories, affected products include iOS prior to 12, macOS Mojave 10.14, tvOS 12, and watchOS 5. The root cause is an input/validation issue that could be exploited to di...

CVE-2018-4299

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

CVE-2018-4299

CVE-2018-4299 involves multiple memory corruption issues resolved by improved memory handling. The initial entry notes the vulnerability affected versions prior to iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, and iCloud for Windows 7.7. Connected documents indicate this CVE app...

CVE-2018-4293

A cookie management issue was addressed with improved checks. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2, iTunes 12.8 for Windows, iCloud for Windows 7.6...

CVE-2018-4319

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue affected versions prior to iOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

CVE-2018-4299

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

CVE-2018-4305

CVE-2018-4305 is an Apple security issue described as an input validation problem, addressed by improved input validation. The initial document notes the vulnerability affects versions prior to iOS 12, tvOS 12, and watchOS 5. Connected Apple advisories (HT209106/HT209107/HT209108) corroborate mul...

CVE-2018-4313

CVE-2018-4313 concerns a consistency issue in how application snapshots are handled in Messages, allowing a local user to potentially discover a user’s deleted messages. The issue affected iOS prior to 12, tvOS prior to 12, and watchOS prior to 5. Apple documented the vulnerability in its securit...

CVE-2018-4290

CVE-2018-4290 is an Apple iOS/watchOS vulnerability in the Emoji component causing a denial-of-service via memory handling issues on versions prior to iOS 11.4.1 and watchOS 4.3.2. The connected Apple security content confirms a memory handling improvement as the fix, with iOS 11.4.1 (and corresp...

CVE-2018-4266

CVE-2018-4266 describes a race condition fixed by additional validation in Apple WebKit/OS components. Affected products/versions include macOS iOS/tvOS/watchOS Safari 11.1.2, iTunes 12.8 for Windows, and iCloud for Windows 7.6. Impact details in the entry show partial availability with no confid...

CVE-2018-4271

CVE-2018-4271 describes multiple memory corruption issues in Apple software that were mitigated by improved input validation. Public references indicate the affected products include iOS (versions prior to 11.4.1), tvOS (prior to 11.4.1), watchOS (prior to 4.3.2), Safari (prior to 11.1.2), iTunes...

CVE-2018-4271

Multiple memory corruption issues were addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6...

CVE-2018-4273

Multiple memory corruption issues were addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6...

CVE-2018-4272

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6...

CVE-2018-4271

Multiple memory corruption issues were addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6...

CVE-2018-4266

A race condition was addressed with additional validation. This issue affected versions prior toiVersions prior to: OS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6...

CVE-2018-4264

CVE-2018-4264 is a memory corruption issue in Apple WebKit/WebKit-derived components that affects multiple Apple platforms and associated desktop/mobile apps. Affected products/areas include iOS, tvOS, watchOS, Safari 11.1.2, iTunes 12.8 for Windows, and iCloud for Windows 7.6, with the vulnerabi...

CVE-2018-4282

CVE-2018-4282 is an Apple kernel local information-disclosure vulnerability: an out-of-bounds read could disclose kernel memory in iOS prior to 11.4.1, tvOS prior to 11.4.1, and watchOS prior to 4.3.2. The root cause is an input validation deficiency that allowed reading beyond bounds. Apple addr...

CVE-2018-4284

A type confusion issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6...