
CVE-2016-7576
https://notcve.org/view.php?id=CVE-2016-7576
11 Jan 2019 — In iOS before 9.3.3, a memory corruption issue existed in the kernel. This issue was addressed through improved memory handling. En iOS en versiones anteriores a la 9.3.3, existía un problema de corrupción de memoria en el kernel. Este problema se abordó mediante la mejora del manejo de memoria. • https://support.apple.com/HT206902 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVE-2017-2411
https://notcve.org/view.php?id=CVE-2017-2411
11 Jan 2019 — In iOS before 11.2, exchange rates were retrieved from HTTP rather than HTTPS. This was addressed by enabling HTTPS for exchange rates. En iOS en versiones anteriores a la 11.2, los tipos de cambio se recuperaron de HTTP en lugar de HTTPS. Esto se abordó habilitando HTTPS para los tipos de cambio. • https://support.apple.com/HT208334 • CWE-254: 7PK - Security Features •

CVE-2018-4147
https://notcve.org/view.php?id=CVE-2018-4147
11 Jan 2019 — In iCloud for Windows before 7.3, Safari before 11.0.3, iTunes before 12.7.3 for Windows, and iOS before 11.2.5, multiple memory corruption issues exist and were addressed with improved memory handling. En iCloud para Windows en versiones anteriores a la 7.3, Safari en versiones anteriores a la 11.0.3, iTunes en versiones anteriores a la 12.7.3 para Windows e iOS en versiones anteriores a la 11.2.5, existen múltiples corrupciones de memoria y fueron abordadas mediante la mejora de la gestión de memoria. • https://support.apple.com/HT208463 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVE-2016-4642
https://notcve.org/view.php?id=CVE-2016-4642
11 Jan 2019 — In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, proxy authentication incorrectly reported HTTP proxies received credentials securely. This issue was addressed through improved warnings. En iOS en versiones anteriores a la 9.3.3, tvOS en versiones anteriores a la 9.2.2 y OS X El Capitan en versiones anteriores a la v10.11.6 y la actualización de seguridad (Security Update) 2016-004, la autenticación por proxy reportó incorrectamente los proxies HTTP q... • https://support.apple.com/HT206902 • CWE-254: 7PK - Security Features •

CVE-2016-4643
https://notcve.org/view.php?id=CVE-2016-4643
11 Jan 2019 — In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, a validation issue existed in the parsing of 407 responses. This issue was addressed through improved response validation. En iOS en versiones anteriores a la 9.3.3, tvOS en versiones anteriores a la 9.2.2 y OS X El Capitan en versiones anteriores a la v10.11.6 y la actualización de seguridad (Security Update) 2016-004, existía un problema de validación en el análisis de respuestas 407. Este problema se... • https://support.apple.com/HT206902 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVE-2017-13888
https://notcve.org/view.php?id=CVE-2017-13888
11 Jan 2019 — In iOS before 11.2, a type confusion issue was addressed with improved memory handling. En iOS en versiones anteriores a la 11.2, se abordó un problema de confusión de tipos con la mejora de la gestión de memoria. • https://support.apple.com/HT208334 • CWE-704: Incorrect Type Conversion or Cast •

CVE-2018-4185
https://notcve.org/view.php?id=CVE-2018-4185
11 Jan 2019 — In iOS before 11.3, tvOS before 11.3, watchOS before 4.3, and macOS before High Sierra 10.13.4, an information disclosure issue existed in the transition of program state. This issue was addressed with improved state handling. En iOS en versiones anteriores a la 11.3, tvOS en versiones anteriores a la 11.3, watchOS en versiones anteriores a la 4.3 y macOS en versiones anteriores a High Sierra 10.13.4, existía un problema de divulgación de información en la transición del estado del programa. Este problema s... • https://github.com/bazad/x18-leak • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVE-2016-4644
https://notcve.org/view.php?id=CVE-2016-4644
11 Jan 2019 — In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, a downgrade issue existed with HTTP authentication credentials saved in Keychain. This issue was addressed by storing the authentication types with the credentials. En iOS en versiones anteriores a la 9.3.3, tvOS en versiones anteriores a la 9.2.2 y OS X El Capitan en versiones anteriores a la v10.11.6 y la actualización de seguridad (Security Update) 2016-004, existía un problema de degradación con las... • https://support.apple.com/HT206902 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVE-2018-4194
https://notcve.org/view.php?id=CVE-2018-4194
11 Jan 2019 — In iOS before 11.4, iCloud for Windows before 7.5, watchOS before 4.3.1, iTunes before 12.7.5 for Windows, and macOS High Sierra before 10.13.5, an out-of-bounds read was addressed with improved input validation. En iOS en versiones anteriores a la 11.4, iCloud para Windows en versiones anteriores a la 7.5, watchOS en versiones anteriores a la 4.3.1, iTunes en versiones anteriores a la 12.7.5 para Windows y macOS High Sierra en versiones anteriores a la 10.13.5, se abordó una lectura fuera de límites con la... • https://support.apple.com/HT208848 • CWE-125: Out-of-bounds Read •

CVE-2018-4430 – Apple Security Advisory 2018-12-05-1
https://notcve.org/view.php?id=CVE-2018-4430
06 Dec 2018 — A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.1. Un problema de bloqueo de pantalla permitía el acceso a los contactos en un dispositivo bloqueado. Este problema se abordó con una gestión de estado mejorada. • https://support.apple.com/kb/HT209340 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •