CVE-2018-4178
https://notcve.org/view.php?id=CVE-2018-4178
A permissions issue existed in which execute permission was incorrectly granted. This issue was addressed with improved permission validation. This issue affected versions prior to macOS High Sierra 10.13.4. Existía un problema de permisos en el que se permitía la ejecución de permisos de manera incorrecta. Este problema se abordó con una validación de permisos mejorada. • https://support.apple.com/kb/HT208937 • CWE-732: Incorrect Permission Assignment for Critical Resource •
CVE-2018-4283 – Apple macOS IOGraphics IDState Out-Of-Bounds Read Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2018-4283
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue affected versions prior to macOS High Sierra 10.13.6. Existía un problema de lectura fuera de límites que conducía a la divulgación de memoria del kernel. Este problema se abordó con una validación de entradas mejorada. • https://support.apple.com/kb/HT208937 • CWE-125: Out-of-bounds Read •
CVE-2018-4268 – Apple macOS APFS methodVolumeCreate Use-After-Free Privilege Escalation Vulnerability
https://notcve.org/view.php?id=CVE-2018-4268
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6. Un problema de corrupción de memoria se abordó con una gestión de memoria mejorada. Este problema afectaba a macOS High Sierra en versiones anteriores a la 10.13.6. This vulnerability allows local attackers to escalate privileges on vulnerable installations of Apple macOS. • https://support.apple.com/kb/HT208937 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2018-4285
https://notcve.org/view.php?id=CVE-2018-4285
A type confusion issue was addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6. Un problema de confusión de tipo se abordó con una gestión de memoria mejorada. Este problema afectaba a macOS High Sierra en versiones anteriores a la 10.13.6. • https://support.apple.com/kb/HT208937 • CWE-704: Incorrect Type Conversion or Cast •
CVE-2018-4289
https://notcve.org/view.php?id=CVE-2018-4289
An information disclosure issue was addressed by removing the vulnerable code. This issue affected versions prior to macOS High Sierra 10.13.6. Se abordaron múltiples problemas de corrupción de memoria con una gestión de memoria mejorada. Este problema afectaba a macOS High Sierra en versiones anteriores a la 10.13.6. • https://support.apple.com/kb/HT208937 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •