CVSS: 5.9EPSS: 0%CPEs: 7EXPL: 0CVE-2018-4266 – Apple Security Advisory 2018-7-9-5
https://notcve.org/view.php?id=CVE-2018-4266
09 Jul 2018 — A race condition was addressed with additional validation. This issue affected versions prior toiVersions prior to: OS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6. Se abordó una condición de carrera con una validación adicional. Este problema afectaba a las versiones anteriores de: iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 para Windows, iCloud para Windows 7.6. Multiple vulnerabilities have been found in WebKitGTK+, the worst of... • https://support.apple.com/kb/HT208932 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •
CVSS: 6.5EPSS: 0%CPEs: 7EXPL: 0CVE-2018-4271 – Apple Security Advisory 2018-7-9-5
https://notcve.org/view.php?id=CVE-2018-4271
09 Jul 2018 — Multiple memory corruption issues were addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6. Múltiples problemas de corrupción de memoria se abordaron con una validación de entradas mejorada. El problema afectaba a iOS en versiones anteriores a la 11.4.1, tvOS en versiones anteriores a la 11.4.1, watchOS en versiones anteriores a la 4.3.2, Safari en versiones anteriores a la 11.1... • https://support.apple.com/kb/HT208932 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 0%CPEs: 5EXPL: 0CVE-2018-4277 – Apple Security Advisory 2018-10-30-14
https://notcve.org/view.php?id=CVE-2018-4277
09 Jul 2018 — In iOS before 11.4.1, watchOS before 4.3.2, tvOS before 11.4.1, Safari before 11.1.1, macOS High Sierra before 10.13.6, a spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. En iOS en versiones anteriores a la 11.4.1, watchOS en versiones anteriores a la 4.3.2, tvOS en versiones anteriores a la 11.4.1, Safari en versiones anteriores a la 11.1.1 y macOS High Sierra en versiones anteriores a la 10.13.6, existía un problema de suplantación en el manejo de UR... • http://www.securitytracker.com/id/1041232 • CWE-20: Improper Input Validation •
CVSS: 5.9EPSS: 0%CPEs: 2EXPL: 0CVE-2018-4290 – Apple Security Advisory 2018-7-9-2
https://notcve.org/view.php?id=CVE-2018-4290
09 Jul 2018 — A denial of service issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, watchOS 4.3.2. Un problema de denegación de servicio (DoS) se abordó con una gestión de memoria mejorada. Este problema afectaba a iOS en versiones anteriores a la 11.4.1 y watchOS en versiones anteriores a la 4.3.2. watchOS 4.3.2 is now available and addresses code execution and denial of service vulnerabilities. • https://support.apple.com/kb/HT208935 •
CVSS: 8.8EPSS: 0%CPEs: 7EXPL: 0CVE-2018-4272 – Apple Security Advisory 2018-7-9-5
https://notcve.org/view.php?id=CVE-2018-4272
09 Jul 2018 — Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6. Se abordaron múltiples problemas de corrupción de memoria con una gestión de memoria mejorada. El problema afectaba a iOS en versiones anteriores a la 11.4.1; tvOS en versiones anteriores a la 11.4.1; watchOS en versiones anteriores a la 4.3.2; Safari en versiones anteriores a la 11.1.2; i... • https://support.apple.com/kb/HT208932 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 1CVE-2018-4280 – Apple Security Advisory 2018-10-30-14
https://notcve.org/view.php?id=CVE-2018-4280
09 Jul 2018 — A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2. Un problema de corrupción de memoria se abordó con una gestión de memoria mejorada. Este problema afectaba a iOS en versiones anteriores a la 11.4.1; macOS High Sierra en versiones anteriores a la 10.13.6; tvOS en versiones anteriores a la 11.4.1 y watchOS en versiones anteriores a la 4.3.2. macOS High Sierra 10.13.6, Security Update ... • https://github.com/bazad/launchd-portrep • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 1CVE-2018-4248 – Apple Security Advisory 2018-10-30-14
https://notcve.org/view.php?id=CVE-2018-4248
09 Jul 2018 — An out-of-bounds read was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2. Se abordó un problema de lectura fuera de límites con una validación de entradas mejorada. Este problema afectaba a iOS en versiones anteriores a la 11.4.1, macOS High Sierra en versiones anteriores a la 10.13.6, tvOS en versiones anteriores a la 11.4.1 y watchOS en versiones anteriores a la 4.3.2. macOS High Sierra 10.13.6, Security Upd... • https://github.com/bazad/xpc-string-leak • CWE-125: Out-of-bounds Read •
CVSS: 5.3EPSS: 0%CPEs: 7EXPL: 0CVE-2018-4293 – Apple Security Advisory 2018-10-30-14
https://notcve.org/view.php?id=CVE-2018-4293
09 Jul 2018 — A cookie management issue was addressed with improved checks. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2, iTunes 12.8 for Windows, iCloud for Windows 7.6. Un problema de gestión de cookie se abordó con comprobaciones mejoradas. El problema afectaba a versiones anteriores a iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2, iTunes 12.8 para Windows, iCloud para Windows 7.6. macOS High Sierra 10.13.6, Security Update 2018-004 Sierra,... • https://support.apple.com/kb/HT208932 • CWE-20: Improper Input Validation •
CVSS: 7.5EPSS: 21%CPEs: 8EXPL: 2CVE-2018-4192 – JavaScript Core - Arbitrary Code Execution
https://notcve.org/view.php?id=CVE-2018-4192
04 Jun 2018 — An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code via a crafted web site that leverages a race condition. Se ha descubierto un problema en algunos productos Apple. • https://packetstorm.news/files/id/148601 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •
CVSS: 8.8EPSS: 0%CPEs: 8EXPL: 0CVE-2018-4214 – Apple Security Advisory 2018-7-23-4
https://notcve.org/view.php?id=CVE-2018-4214
04 Jun 2018 — An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to cause a denial of service (memory corruption and Safari crash) or possibly have unspecified other impact via a crafted web site. Se ha descubierto un problema en algunos prod... • http://www.securitytracker.com/id/1041029 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •