CVSS: 6.4EPSS: 0%CPEs: 6EXPL: 0CVE-2018-4309 – Apple Safari Subframe Same-Origin Policy Bypass Vulnerability
https://notcve.org/view.php?id=CVE-2018-4309
A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7. Existía un problema de Cross-Site Scripting (XSS) en Safari. Este problema se abordó con una validación de URL mejorada. • https://support.apple.com/kb/HT209106 https://support.apple.com/kb/HT209107 https://support.apple.com/kb/HT209109 https://support.apple.com/kb/HT209140 https://support.apple.com/kb/HT209141 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 8.8EPSS: 0%CPEs: 7EXPL: 0CVE-2018-4358 – Apple Safari Array Concat Uninitialized Buffer Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2018-4358
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7. Se abordaron múltiples problemas de corrupción de memoria con una gestión de memoria mejorada. El problema afectaba a iOS en versiones anteriores a la 12, tvOS en versiones anteriores a la 12, watchOS en versiones anteriores a la 5, Safari en versiones anteriores a la 12, iTunes para Windows en versiones anteriores a la 12.9 y iCloud para Windows en versiones anteriores a la 7.7. This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Apple Safari. • https://support.apple.com/kb/HT209106 https://support.apple.com/kb/HT209107 https://support.apple.com/kb/HT209108 https://support.apple.com/kb/HT209109 https://support.apple.com/kb/HT209140 https://support.apple.com/kb/HT209141 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.1EPSS: 0%CPEs: 3EXPL: 0CVE-2018-4363
https://notcve.org/view.php?id=CVE-2018-4363
An input validation issue existed in the kernel. This issue was addressed with improved input validation. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5. Existía un problema de validación de entradas en el kernel. Este problema se abordó con una validación de entradas mejorada. • https://support.apple.com/kb/HT209106 https://support.apple.com/kb/HT209107 https://support.apple.com/kb/HT209108 • CWE-20: Improper Input Validation •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2018-4335
https://notcve.org/view.php?id=CVE-2018-4335
A validation issue was addressed with improved input sanitization. This issue affected versions prior to iOS 12. Un problema de validación se abordó con un saneamiento de entradas mejorado. Este problema afectaba a iOS en versiones anteriores a la 12. • https://support.apple.com/kb/HT209106 • CWE-20: Improper Input Validation •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 1CVE-2018-4330
https://notcve.org/view.php?id=CVE-2018-4330
In iOS before 11.4, a memory corruption issue exists and was addressed with improved memory handling. En iOS en versiones anteriores a la 11.4, existe un problema de corrupción de memoria y se abordó con la mejora de la gestión de memoria. • https://github.com/harryanon/POC-CVE-2018-4327-and-CVE-2018-4330 http://www.securityfocus.com/bid/105384 http://www.securitytracker.com/id/1041665 https://support.apple.com/HT208848 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •