CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2018-4260 – Apple Security Advisory 2018-7-9-5
https://notcve.org/view.php?id=CVE-2018-4260
09 Jul 2018 — An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to iOS 11.4.1, Safari 11.1.2. Se abordó un problema de inconsistencia en la interfaz de usuario con una gestión de estado mejorada. Este problema afectaba a iOS en versiones anteriores a la 11.4.1 y Safari en versiones anteriores a la 11.1.2. Safari 11.1.2 is now available and addresses code execution and denial of service vulnerabilities. • https://support.apple.com/kb/HT208934 • CWE-20: Improper Input Validation •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2018-4274 – Apple Security Advisory 2018-7-9-5
https://notcve.org/view.php?id=CVE-2018-4274
09 Jul 2018 — A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, Safari 11.1.2. Existía un problema suplantación en la gestión de las URL. Este problema se abordó con una validación de entradas mejorada. • https://support.apple.com/kb/HT208934 • CWE-20: Improper Input Validation •
CVSS: 5.9EPSS: 0%CPEs: 2EXPL: 0CVE-2018-4290 – Apple Security Advisory 2018-7-9-2
https://notcve.org/view.php?id=CVE-2018-4290
09 Jul 2018 — A denial of service issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, watchOS 4.3.2. Un problema de denegación de servicio (DoS) se abordó con una gestión de memoria mejorada. Este problema afectaba a iOS en versiones anteriores a la 11.4.1 y watchOS en versiones anteriores a la 4.3.2. watchOS 4.3.2 is now available and addresses code execution and denial of service vulnerabilities. • https://support.apple.com/kb/HT208935 •
CVSS: 6.5EPSS: 0%CPEs: 7EXPL: 0CVE-2018-4188 – Apple Security Advisory 2018-7-23-4
https://notcve.org/view.php?id=CVE-2018-4188
04 Jun 2018 — An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to spoof the address bar via a crafted web site. Se ha descubierto un problema en algunos productos Apple. • http://www.securitytracker.com/id/1041029 • CWE-20: Improper Input Validation •
CVSS: 8.8EPSS: 1%CPEs: 10EXPL: 0CVE-2018-4190 – Apple Security Advisory 2018-7-23-4
https://notcve.org/view.php?id=CVE-2018-4190
04 Jun 2018 — An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive credential information that is transmitted during a CSS mask-image fetch. Se ha descubierto un problema en algunos productos Apple. • http://www.securitytracker.com/id/1041029 • CWE-522: Insufficiently Protected Credentials •
CVSS: 4.6EPSS: 0%CPEs: 1EXPL: 0CVE-2018-4239 – Apple Security Advisory 2018-06-01-4
https://notcve.org/view.php?id=CVE-2018-4239
04 Jun 2018 — An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Magnifier" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and see the most recent Magnifier image. Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.4 se han visto afectadas. • http://www.securitytracker.com/id/1041031 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2018-4215 – Apple Security Advisory 2018-06-01-4
https://notcve.org/view.php?id=CVE-2018-4215
04 Jun 2018 — An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Bluetooth" component. It allows attackers to gain privileges or cause a denial of service (buffer overflow) via a crafted app. Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.4 se han visto afectadas. • http://www.securitytracker.com/id/1041031 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.8EPSS: 0%CPEs: 10EXPL: 0CVE-2018-4246 – Apple Security Advisory 2018-7-23-4
https://notcve.org/view.php?id=CVE-2018-4246
04 Jun 2018 — An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code via a crafted web site that leverages type confusion. Se ha descubierto un problema en algunos productos Apple. • http://www.securitytracker.com/id/1041029 • CWE-704: Incorrect Type Conversion or Cast •
CVSS: 8.8EPSS: 0%CPEs: 8EXPL: 0CVE-2018-4201 – Apple Security Advisory 2018-7-23-4
https://notcve.org/view.php?id=CVE-2018-4201
04 Jun 2018 — An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Se ha descubierto un problema en algunos productos Apple... • http://www.securitytracker.com/id/1041029 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.8EPSS: 81%CPEs: 11EXPL: 3CVE-2018-4218 – WebKit - Use-After-Free when Resuming Generator
https://notcve.org/view.php?id=CVE-2018-4218
04 Jun 2018 — An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site that triggers an @generatorState use-after-free. Se ha de... • https://packetstorm.news/files/id/148092 • CWE-416: Use After Free •