PT-2018-16517

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.4.1 tvOS versions prior to 11.4.1 watchOS versions prior to 4.3.2 Safari versions prior to 11.1.2 iTunes for Windows versions prior to 12.8 iCloud for Windows versions prior to 7.6 Description The issue is related to...

CVE-2018-4266

A race condition was addressed with additional validation. This issue affected versions prior toiVersions prior to: OS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6...

CVE-2018-4273

Multiple memory corruption issues were addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6...

PT-2018-16521

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.4.1 tvOS versions prior to 11.4.1 watchOS versions prior to 4.3.2 Safari versions prior to 11.1.2 iTunes for Windows versions prior to 12.8 iCloud for Windows versions prior to 7.6 Description A type confusion issue wa...

PT-2018-16513

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.4.1 tvOS versions prior to 11.4.1 watchOS versions prior to 4.3.2 Safari versions prior to 11.1.2 iTunes versions prior to 12.8 for Windows iCloud for Windows versions prior to 7.6 Description A race condition was...

PT-2018-16511

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 11.4.1 Apple tvOS versions prior to 11.4.1 Apple watchOS versions prior to 4.3.2 Apple Safari versions prior to 11.1.2 Apple iTunes for Windows versions prior to 12.8 Apple iCloud for Windows versions prior to 7.6...

PT-2018-16516

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.4.1 tvOS versions prior to 11.4.1 watchOS versions prior to 4.3.2 Safari versions prior to 11.1.2 iTunes for Windows versions prior to 12.8 iCloud for Windows versions prior to 7.6 Description A memory corruption issue...

The vulnerability of the getvolattrlist function in the kernel of operating systems such as Mac OS X, iOS, tvOS, and watchOS allows a malicious actor to execute arbitrary code in a privileged context.

The vulnerability of the getvolattrlist function in the kernel of operating systems such as Mac OS X, iOS, tvOS, and watchOS arises from an overflow in the “bucket” buffer. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context using a specially...

CVE-2018-4117

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. watchOS before 4.3 is affected. The issue involves the fetch API in the "WebKit" component. It...

Apple Releases Multiple Security Updates

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. NCCIC encourages users and administrators to review Apple security pages for the following products and apply the...

About the security content of watchOS 4.3.2

About the security content of watchOS 4.3.2 This document describes the security content of watchOS 4.3.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

PT-2018-16466

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.4 iCloud for Windows versions prior to 7.5 watchOS versions prior to 4.3.1 iTunes for Windows versions prior to 12.7.5 macOS High Sierra versions prior to 10.13.5 Description An out-of-bounds read issue was addressed...

CVE-2018-4240

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Messages" component. It allows remote attackers to cause a denial of service via a crafted...

CVE-2018-4233

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit"...

CVE-2018-4241

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Kernel" component. A buffer overflow in mptcpusrconnectx allows attackers to execute arbitrary...

CVE-2018-4243

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Kernel" component. A buffer overflow in getvolattrlist allows attackers to execute arbitrary co...

CVE-2018-4246

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit"...

CVE-2018-4235

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Messages" component. It allows local users to perform impersonation attacks via an unspecified...

CVE-2018-4240

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Messages" component. It allows remote attackers to cause a denial of service via a crafted...

CVE-2018-4249

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves pktmnglripfilterinput in com.apple.packet-mangler in the "Kernel" component. It allows attackers to...