UBUNTU-CVE-2018-4089

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. Safari before 11.0.3 is affected. tvOS before 11.2.5 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial o...

Design/Logic Flaw

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain...

CVE-2018-4127

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. The issue involves the "WebKit" component. It allows remote attacker...

CVE-2018-4161

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit"...

CVE-2018-4096

CVE-2018-4096 is a WebKit memory-corruption issue exploited via a crafted web site, affecting multiple Apple platforms (iOS <11.2.5, macOS <10.13.3, Safari <11.0.3, iCloud/iTunes on Windows, tvOS <11.2.5, watchOS

CVE-2018-4118

CVE-2018-4118 affects Apple's WebKit stack used by iOS ≤11.2/11.2.x and related components on macOS/tvOS, iCloud for Windows, and iTunes for Windows. Affected: WebKit-based rendering; vulnerability allows remote attackers to execute arbitrary code or cause a denial of service via a crafted websit...

CVE-2017-7161

An issue was discovered in certain Apple products. Safari before 11.0.2 is affected. The issue involves the "WebKit Web Inspector" component. It allows remote attackers to execute arbitrary code via special characters that trigger command injection...

CVE-2018-4125

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit"...

CVE-2018-4101

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. The issue involves the "WebKit" component. It allows remote attacker...

CVE-2018-4146

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit"...

CVE-2018-4129

CVE-2018-4129 affects Apple's WebKit on multiple platforms (iOS 11.3, Safari 11.1, tvOS 11.3, watchOS 4.3, iCloud/iTunes on Windows). The issue is a memory-corruption vulnerability in WebKit that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website....

CVE-2018-4129

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit"...

CVE-2018-4165

CVE-2018-4165 affects Apple WebKit components across multiple Apple platforms. The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website, via memory corruption in WebKit. Affected products include iOS prior to 11.3, Safari prior to 11.1, iCloud...

CVE-2017-13885

CVE-2017-13885 affects WebKit in several Apple products: iOS before 11.2, Safari before 11.0.2, iCloud on Windows before 7.2, iTunes for Windows before 12.7.2, and tvOS before 11.2. Root cause is memory corruption in WebKit that could allow remote attackers to execute arbitrary code or cause a de...

CVE-2018-4146

CVE-2018-4146 affects Apple WebKit components across iOS, Safari, tvOS, watchOS, iCloud/Desktop WebKit stack. The issue allows memory corruption triggered by a crafted website, potentially causing a denial of service. Affected: iOS before 11.3; Safari before 11.1; iCloud on Windows before 7.4; iT...

CVE-2018-4133

CVE-2018-4133 affects Safari/WebKit prior to Safari 11.1. A cross-site scripting (XSS) vulnerability in WebKit could allow a remote attacker to inject arbitrary web script or HTML via a crafted URL. Exploitation requires a user to visit a malicious page; impact is remote script execution within t...

CVE-2018-4165

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. The issue involves the "WebKit" component. It allows remote attacker...

CVE-2017-7071

CVE-2017-7071 affects Apple Safari prior to 10.1 via the WebKit component. The issue enables remote attackers to execute arbitrary code or trigger memory corruption and an application crash when visiting a crafted site. The NVD entry confirms a WebKit-based concern with both code execution and me...

CVE-2018-4162

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit"...

CVE-2017-7161

CVE-2017-7161 affects Safari/WebKit’s Web Inspector. An arbitrary code execution vulnerability exists in Safari before 11.0.2 due to a command-injection flaw triggered by crafting special characters in WebKit Web Inspector. Exploitation would allow a remote attacker to run arbitrary code on the a...