Lucene search

Iphone Os Security Vulnerabilities

cve

CVE-2018-4249

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves pktmnglr_ipfilter_input in com.apple.packet-mangler in the "Kernel" component. It allows attackers to ...

7.8CVSS

7.2AI Score

0.005EPSS

2018-06-08 06:29 PM

cve

CVE-2018-4250

An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Messages" component. It allows remote attackers to cause a denial of service via a crafted message.

6.5CVSS

5.6AI Score

0.001EPSS

2018-06-08 06:29 PM

cve

CVE-2018-4252

An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and obtain private notification content via Siri.

4.6CVSS

4.6AI Score

0.001EPSS

2018-06-08 06:29 PM

cve

CVE-2018-4260

An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to iOS 11.4.1, Safari 11.1.2.

6.5CVSS

6.4AI Score

0.001EPSS

2019-04-03 06:29 PM

cve

CVE-2018-4261

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.

8.8CVSS

8.2AI Score

0.006EPSS

2019-04-03 06:29 PM

149

cve

CVE-2018-4262

In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, multiple memory corruption issues were addressed with improved memory handling.

8.8CVSS

8.2AI Score

0.006EPSS

2019-01-11 06:29 PM

130

cve

CVE-2018-4263

8.8CVSS

8.2AI Score

0.006EPSS

2019-04-03 06:29 PM

133

cve

CVE-2018-4264

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.

8.8CVSS

8.2AI Score

0.008EPSS

2019-04-03 06:29 PM

139

cve

CVE-2018-4265

8.8CVSS

8.2AI Score

0.006EPSS

2019-04-03 06:29 PM

135

cve

CVE-2018-4266

A race condition was addressed with additional validation. This issue affected versions prior toiVersions prior to: OS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.

5.9CVSS

6.5AI Score

0.007EPSS

2019-04-03 06:29 PM

133

cve

CVE-2018-4267

8.8CVSS

8.2AI Score

0.006EPSS

2019-04-03 06:29 PM

134

cve

CVE-2018-4269

A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.

8.6CVSS

6.3AI Score

0.002EPSS

2019-04-03 06:29 PM

cve

CVE-2018-4270

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.

6.5CVSS

7.1AI Score

0.006EPSS

2019-04-03 06:29 PM

150

cve

CVE-2018-4271

Multiple memory corruption issues were addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.

6.5CVSS

7.4AI Score

0.006EPSS

2019-04-03 06:29 PM

cve

CVE-2018-4272

8.8CVSS

8.2AI Score

0.008EPSS

2019-04-03 06:29 PM

134

cve

CVE-2018-4273

6.5CVSS

7.4AI Score

0.006EPSS

2019-04-03 06:29 PM

135

cve

CVE-2018-4274

A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, Safari 11.1.2.

7.5CVSS

7AI Score

0.001EPSS

2019-04-03 06:29 PM

cve

CVE-2018-4275

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1.

8.6CVSS

7.3AI Score

0.001EPSS

2019-04-03 06:29 PM

cve

CVE-2018-4277

In iOS before 11.4.1, watchOS before 4.3.2, tvOS before 11.4.1, Safari before 11.1.1, macOS High Sierra before 10.13.6, a spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation.

7.5CVSS

5.7AI Score

0.005EPSS

2019-01-11 06:29 PM

cve

CVE-2018-4278

In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, sound fetched through audio elements may be exfiltrated cross-origin. This issue was addressed with improved audio taint tracking.

4.3CVSS

5.5AI Score

0.004EPSS

2019-01-11 06:29 PM

147

cve

CVE-2018-4280

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2.

7.8CVSS

5.9AI Score

0.002EPSS

2019-04-03 06:29 PM

cve

CVE-2018-4282

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2.

5.5CVSS

5.7AI Score

0.001EPSS

2019-04-03 06:29 PM

cve

CVE-2018-4284

A type confusion issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.

8.8CVSS

7.5AI Score

0.007EPSS

2019-04-03 06:29 PM

134

cve

CVE-2018-4290

A denial of service issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, watchOS 4.3.2.

5.9CVSS

5.9AI Score

0.001EPSS

2019-04-03 06:29 PM

cve

CVE-2018-4293

A cookie management issue was addressed with improved checks. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.

5.3CVSS

5.7AI Score

0.003EPSS

2019-04-03 06:29 PM

cve

CVE-2018-4298

In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, a permissions issue existed in Remote Management. This issue was addressed through improved permission validation.

9.8CVSS

8.8AI Score

0.002EPSS

2019-01-11 06:29 PM

cve

CVE-2018-4299

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

8.8CVSS

8.2AI Score

0.007EPSS

2019-04-03 06:29 PM

139

cve

CVE-2018-4302

A null pointer dereference was addressed with improved validation. This issue is fixed in macOS High Sierra 10.13, iCloud for Windows 7.0, watchOS 4, iOS 11, iTunes 12.7 for Windows. Processing maliciously crafted XML may lead to an unexpected application termination or arbitrary code execution.

7.8CVSS

8.2AI Score

0.001EPSS

2021-12-23 08:15 PM

cve

CVE-2018-4303

An input validation issue was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14, iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.

7.8CVSS

6.8AI Score

0.002EPSS

2019-04-03 06:29 PM

cve

CVE-2018-4304

A denial of service issue was addressed with improved validation. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

5CVSS

5.8AI Score

0.001EPSS

2019-04-03 06:29 PM

cve

CVE-2018-4305

An input validation issue was addressed with improved input validation. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5.

6.5CVSS

6.8AI Score

0.001EPSS

2019-04-03 06:29 PM

cve

CVE-2018-4306

A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

8.8CVSS

7.6AI Score

0.385EPSS

2019-04-03 06:29 PM

128

cve

CVE-2018-4307

A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12, Safari 12.

4.3CVSS

5.2AI Score

0.001EPSS

2019-04-03 06:29 PM

cve

CVE-2018-4309

A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

6.1CVSS

6.1AI Score

0.002EPSS

2019-04-03 06:29 PM

113

cve

CVE-2018-4310

An access issue was addressed with additional sandbox restrictions. This issue affected versions prior to iOS 12, macOS Mojave 10.14.

10CVSS

7.1AI Score

0.004EPSS

2019-04-03 06:29 PM

cve

CVE-2018-4311

The issue was addressed by removing origin information. This issue affected versions prior to iOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

8.1CVSS

7.6AI Score

0.003EPSS

2019-04-03 06:29 PM

cve

CVE-2018-4312

A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

8.8CVSS

7.6AI Score

0.385EPSS

2019-04-03 06:29 PM

122

cve

CVE-2018-4313

A consistency issue existed in the handling of application snapshots. The issue was addressed with improved handling of message deletions. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5.

5.5CVSS

6.1AI Score

0.001EPSS

2019-04-03 06:29 PM

cve

CVE-2018-4314

A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

8.8CVSS

7.6AI Score

0.385EPSS

2019-04-03 06:29 PM

129

cve

CVE-2018-4315

A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

8.8CVSS

7.6AI Score

0.385EPSS

2019-04-03 06:29 PM

117

cve

CVE-2018-4316

A memory corruption issue was addressed with improved state management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

8.8CVSS

7.8AI Score

0.006EPSS

2019-04-03 06:29 PM

118

cve

CVE-2018-4317

A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

8.8CVSS

7.6AI Score

0.385EPSS

2019-04-03 06:29 PM

118

cve

CVE-2018-4318

A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

8.8CVSS

7.6AI Score

0.385EPSS

2019-04-03 06:29 PM

135

cve

CVE-2018-4319

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue affected versions prior to iOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

8.1CVSS

7.4AI Score

0.003EPSS

2019-04-03 06:29 PM

114

cve

CVE-2018-4321

A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12.

5.3CVSS

5.8AI Score

0.001EPSS

2019-04-03 06:29 PM

cve

CVE-2018-4322

This issue was addressed with improved entitlements. This issue affected versions prior to iOS 12.

3.3CVSS

5AI Score

0.0004EPSS

2019-04-03 06:29 PM

cve

CVE-2018-4323

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

8.8CVSS

8.2AI Score

0.802EPSS

2019-04-03 06:29 PM

124

cve

CVE-2018-4325

A logic issue was addressed with improved restrictions. This issue affected versions prior to iOS 12.

2.4CVSS

5AI Score

0.001EPSS

2019-04-03 06:29 PM

cve

CVE-2018-4326

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14.

7.8CVSS

7.3AI Score

0.001EPSS

2019-04-03 06:29 PM

cve

CVE-2018-4327

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1.

7.8CVSS

7.1AI Score

0.001EPSS

2019-04-03 06:29 PM

Total number of security vulnerabilities3321