CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2018-4217
https://notcve.org/view.php?id=CVE-2018-4217
In macOS High Sierra before 10.13.5, a privacy issue in the handling of Open Directory records was addressed with improved indexing. En macOS High Sierra en versiones anteriores a la 10.13.5, se abordó un problema de privacidad en el manejo de los registros Open Directory con la mejora de la indexación. • https://support.apple.com/HT208849 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2018-4258
https://notcve.org/view.php?id=CVE-2018-4258
In macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved bounds checking. En macOS High Sierra en versiones anteriores a la 10.13.5, se abordó un desbordamiento de búfer con la mejora de la comprobación de límites. • https://support.apple.com/HT208849 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.1EPSS: 0%CPEs: 1EXPL: 0CVE-2018-4434
https://notcve.org/view.php?id=CVE-2018-4434
An out-of-bounds read was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14.2. Se abordó un problema de lectura fuera de límites con una validación de entradas mejorada. Este problema afectaba a macOS Mojave en versiones anteriores a la 10.14.2. • https://support.apple.com/kb/HT209341 • CWE-125: Out-of-bounds Read •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2018-4462 – Apple macOS AMDFramebuffer Integer Overflow Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2018-4462
A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10.14.2. Un problema de validación se abordó con un saneamiento de entradas mejorado. Este problema afectaba a macOS Mojave en versiones anteriores a la 10.14.2. This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Apple macOS. • https://support.apple.com/kb/HT209341 • CWE-20: Improper Input Validation •
CVSS: 9.3EPSS: 0%CPEs: 4EXPL: 0CVE-2018-4447 – Apple macOS watchevent Use-After-Free Privilege Escalation Vulnerability
https://notcve.org/view.php?id=CVE-2018-4447
A memory corruption issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2. Un problema de corrupción de memoria se abordó con una gestión de estado mejorada. Este problema afectaba a iOS en versiones anteriores a la 12.1.1, macOS Mojave en versiones anteriores a la 10.14.2, tvOS en versiones anteriores a la 12.1.1, watchOS en versiones anteriores a la 5.1.2. This vulnerability allows local attackers to escalate privileges on vulnerable installations of Apple macOS. • https://support.apple.com/kb/HT209340 https://support.apple.com/kb/HT209341 https://support.apple.com/kb/HT209342 https://support.apple.com/kb/HT209343 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •