Page 105 of 1649 results (0.026 seconds)

CVSS: 8.8EPSS: 0%CPEs: 8EXPL: 0

CVE-2018-4201 – Apple Security Advisory 2018-7-23-4

https://notcve.org/view.php?id=CVE-2018-4201

04 Jun 2018 — An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Se ha descubierto un problema en algunos productos Apple... • http://www.securitytracker.com/id/1041029 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 8.8EPSS: 79%CPEs: 11EXPL: 3

CVE-2018-4222 – WebKit - WebAssembly Compilation Info Leak

https://notcve.org/view.php?id=CVE-2018-4222

04 Jun 2018 — An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code via a crafted web site that leverages a getWasmBufferFromValue out-of-bounds read during WebAssembly compilation. Se ha descubierto un problema en algu... • https://packetstorm.news/files/id/148089 • CWE-125: Out-of-bounds Read •

CVSS: 8.8EPSS: 81%CPEs: 11EXPL: 3

CVE-2018-4218 – WebKit - Use-After-Free when Resuming Generator

https://notcve.org/view.php?id=CVE-2018-4218

04 Jun 2018 — An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site that triggers an @generatorState use-after-free. Se ha de... • https://packetstorm.news/files/id/148092 • CWE-416: Use After Free •

CVSS: 8.8EPSS: 6%CPEs: 11EXPL: 4

CVE-2018-4233 – Apple Safari CreateThis Type Confusion Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2018-4233

04 Jun 2018 — An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Se ha descubierto un problema en algunos productos Apple... • https://packetstorm.news/files/id/153148 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.8EPSS: 1%CPEs: 4EXPL: 2

CVE-2018-4237 – Apple macOS task_set_special_port Port Overwrite Privilege Escalation Vulnerability

https://notcve.org/view.php?id=CVE-2018-4237

01 Jun 2018 — An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "libxpc" component. It allows attackers to gain privileges via a crafted app that leverages a logic error. Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.4, las versiones de macOS anteriores a la 10.13.5, las versiones de tvOS anteriores a la 11.4 y las versio... • https://packetstorm.news/files/id/150488 •

CVSS: 6.5EPSS: 10%CPEs: 4EXPL: 2

CVE-2018-4240 – Apple macOS 10.13.4 - Denial of Service (PoC)

https://notcve.org/view.php?id=CVE-2018-4240

01 Jun 2018 — An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Messages" component. It allows remote attackers to cause a denial of service via a crafted message. Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.4, las versiones de macOS anteriores a la 10.13.5, las versiones de tvOS anteriores a la 11.4 y las versiones de... • https://packetstorm.news/files/id/149330 • CWE-20: Improper Input Validation •

CVSS: 8.8EPSS: 85%CPEs: 10EXPL: 3

CVE-2018-4200 – WebKit - 'WebCore::jsElementScrollHeightGetter' Use-After-Free

https://notcve.org/view.php?id=CVE-2018-4200

26 Apr 2018 — An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. Safari before 11.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site that triggers a WebCore::jsElementScrollHeightGetter use-after-free. Se ha descubierto un p... • https://packetstorm.news/files/id/147421 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-416: Use After Free •

CVSS: 8.8EPSS: 0%CPEs: 7EXPL: 0

CVE-2018-4204 – Apple Safari Array splice Out-Of-Bounds Access Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2018-4204

26 Apr 2018 — An issue was discovered in certain Apple products. iOS before 11.4 is affected. iOS before 11.3.1 is affected. Safari before 11.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Se ha descubierto un problema en ciertos productos Apple. • http://www.securityfocus.com/bid/103961 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 5.9EPSS: 0%CPEs: 2EXPL: 0

CVE-2017-7164

https://notcve.org/view.php?id=CVE-2017-7164

03 Apr 2018 — An issue was discovered in certain Apple products. iOS before 11.2 is affected. tvOS before 11.2 is affected. The issue involves the "App Store" component. It allows man-in-the-middle attackers to spoof password prompts. Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 11.2 y las versiones de tvOS anteriores a la 11.2. • https://support.apple.com/HT208327 • CWE-20: Improper Input Validation •

CVSS: 5.5EPSS: 0%CPEs: 4EXPL: 0

CVE-2017-7003

https://notcve.org/view.php?id=CVE-2017-7003

03 Apr 2018 — An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "CoreText" component. It allows remote attackers to cause a denial of service (application crash) via a crafted file. Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 10.3.2, las versiones de macOS anteriores a la 10.12.5, las versiones de tvOS anteriores a la ... • https://support.apple.com/HT207797 • CWE-20: Improper Input Validation •