CVE-2018-4206: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. macOS before 10.13.4 Security Update 2018-001 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Crash Reporter" component. It allows attackers to execute arbitrary...

CVE-2018-4222: Out-of-bounds Read

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit"...

CVE-2018-4218: Use After Free

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit"...

CVE-2018-4226: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. watchOS before 4.3.1 is affected. The issue involves the "Security" component. It allows local...

CVE-2018-4201: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit"...

CVE-2018-4225: Improper Input Validation

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. watchOS before 4.3.1 is affected. The issue involves the "Security" component. It allows local...

PT-2018-16491

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.4 macOS versions prior to 10.13.5 tvOS versions prior to 11.4 watchOS versions prior to 4.3.1 Description The issue involves the Security component and allows local users to bypass intended restrictions on the reading ...

PT-2018-16492

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.4 macOS versions prior to 10.13.5 iCloud versions prior to 7.5 on Windows iTunes versions prior to 12.7.5 on Windows tvOS versions prior to 11.4 watchOS versions prior to 4.3.1 Description The issue involves the Securi...

PT-2018-16476

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.3.1 macOS versions prior to 10.13.4 Security Update 2018-001 tvOS versions prior to 11.4 watchOS versions prior to 4.3.1 Description The issue involves the Crash Reporter component and allows attackers to execute...

PT-2018-16493

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 11.4 Apple macOS versions prior to 10.13.5 Apple iCloud versions prior to 7.5 on Windows Apple iTunes versions prior to 12.7.5 on Windows Apple watchOS versions prior to 4.3.1 Description The issue involves the...

PT-2018-16481

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.4 macOS versions prior to 10.13.5 tvOS versions prior to 11.4 watchOS versions prior to 4.3.1 Description The issue involves the FontParser component and allows remote attackers to execute arbitrary code or cause a...

PT-2018-16494

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.4 macOS versions prior to 10.13.5 iCloud versions prior to 7.5 on Windows iTunes versions prior to 12.7.5 on Windows watchOS versions prior to 4.3.1 Description The issue involves the Security component and allows loca...

PT-2018-16498

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.4 macOS versions prior to 10.13.5 tvOS versions prior to 11.4 watchOS versions prior to 4.3.1 Description The issue involves the Messages component and allows local users to perform impersonation attacks via an...

PT-2018-16499

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.4 macOS versions prior to 10.13.5 tvOS versions prior to 11.4 watchOS versions prior to 4.3.1 Description The issue involves the libxpc component and allows attackers to gain privileges via a crafted app that leverages...

PT-2018-16502

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.4 macOS versions prior to 10.13.5 tvOS versions prior to 11.4 watchOS versions prior to 4.3.1 Description The issue involves the Messages component and allows remote attackers to cause a denial of service via a crafted...

CVE-2018-4214: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit"...

CVE-2018-4192: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit"...

CVE-2018-4233: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit"...

CVE-2018-4233

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit"...

PT-2018-1380

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.13.5 iOS versions prior to 11.4 tvOS versions prior to 11.4 watchOS versions prior to 4.3.1 Description The issue involves a buffer overflow in the mptcp usr connectx function of the kernel, which can be exploited by...