CVE-2018-4199

CVE-2018-4199 affects Apple WebKit components across multiple Apple products (iOS before 11.4, Safari before 11.1.1, tvOS before 11.4, iCloud/iTunes/WebKit on Windows). The description specifies that remote attackers may exploit a crafted web site to execute arbitrary code or cause a denial of se...

CVE-2018-4233

A remote code execution vulnerability exists in the WebKit component across multiple Apple products, including iOS (before 11.4), Safari (before 11.1.1), iCloud for Windows (before 7.5), iTunes for Windows (before 12.7.5), tvOS (before 11.4), and watchOS (before 4.3.1). The root cause is a memory...

CVE-2018-4233

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit"...

CVE-2018-4246

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit"...

CVE-2018-4190

CVE-2018-4190 concerns a WebKit issue across Apple platforms (iOS before 11.4, Safari before 11.1.1, iCloud/iTunes on Windows, tvOS) where credentials could be exposed during a fetch of CSS mask images. Nessus/OpenSUSE/NASL entries describe credential leakage via CSS mask image fetch in WebKit; A...

CVE-2018-4201

CVE-2018-4201 affects WebKit on multiple Apple platforms (iOS <11.4, Safari <11.1.1, iCloud for Windows <7.5, iTunes for Windows <12.7.5, tvOS <11.4, watchOS

CVE-2018-4218

CVE-2018-4218 concerns a use-after-free in Apple WebKit affecting WebKit in iOS (and Safari on macOS) and related components (iCloud, iTunes on Windows, tvOS/watchOS) via a crafted web site triggering @generatorState. The issue can allow remote arbitrary code execution or cause a denial of servic...

CVE-2018-4188

CVE-2018-4188 affects Apple’s WebKit across multiple OS X/iOS platforms. The issue, present in iOS prior to 11.4, Safari prior to 11.1.1, iCloud/Windows components, and tvOS prior to 11.4, allows remote attackers to spoof the address bar via a crafted web page. The Apple advisories for Safari 11....

CVE-2018-4192

CVE-2018-4192 affects Apple WebKit throughout iOS, macOS, tvOS, watchOS, iCloud on Windows, and iTunes/WebKit components. The flaw is a race condition in WebKit that enables remote code execution via a crafted website. The vulnerability is tied to multiple Apple products and WebKit usage in Safar...

CVE-2018-4200

CVE-2018-4200 concerns WebKit in Apple products. A crafted web site could trigger a WebCore::jsElementScrollHeightGetter use-after-free, leading to arbitrary code execution or a denial of service (memory corruption/crash). Affected: iOS < 11.3.1; Safari < 11.1; iCloud for Windows < 7.5; ...

CVE-2018-4204

CVE-2018-4204 involves WebKit in several Apple products (iOS <11.4, iOS <11.3.1, Safari <11.1, iCloud for Windows 7.5, iTunes for Windows <12.7.5, tvOS

CVE-2018-4214

CVE-2018-4214 concerns a memory corruption issue in WebKit used by Apple platforms. The vulnerability affects Apple products where WebKit handles crafted web content, notably iOS before 11.4 and Safari before 11.1.1, as well as iCloud/iTunes/watchOS/tvOS variants listed in Apple advisories. The d...

CVE-2018-4222

CVE-2018-4222 affects WebKit components in multiple Apple platforms (iOS 11.4, Safari 11.1.1, iCloud/Win apps, tvOS/watchOS).根本原因：WebAssembly编译阶段的 getWasmBufferFromValue 的边界读取，WebKit 按错将数组缓冲区指针嵌入偏移，从而在读取表时产生越界。受影响的实现关键在于 WebAssembly 模块读取与内存/表的管理，导致在构造或执行 WebAssembly 模块时可能触发任意代码执行的潜在风险。公开的利用信息在 Pr...

CVE-2018-4200

An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. Safari before 11.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the "WebKit" component. It allows remote...

CVE-2018-4233

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit"...

CVE-2018-4232

CVE-2018-4232 affects WebKit in several Apple platforms (iOS prior to 11.4, Safari prior to 11.1.1, iCloud for Windows 7.5, iTunes for Windows prior to 12.7.5, and tvOS prior to 11.4), allowing remote attackers to overwrite cookies via a crafted website. The initial description explicitly states ...

CVE-2018-4246

CVE-2018-4246 affects WebKit in Apple products including iOS before 11.4, Safari before 11.1.1, iCloud for Windows, iTunes for Windows, tvOS before 11.4, and watchOS before 4.3.1. Root cause: type confusion in WebKit allows remote attackers to execute arbitrary code via a crafted website. Impact:...

CVE-2018-4192

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit"...

CVE-2018-4199

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the "WebKit" component. It allows remote...

CVE-2018-4233

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit"...