CVSS: 6.4EPSS: 0%CPEs: 6EXPL: 0CVE-2018-4309 – Apple Safari Subframe Same-Origin Policy Bypass Vulnerability
https://notcve.org/view.php?id=CVE-2018-4309
A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7. Existía un problema de Cross-Site Scripting (XSS) en Safari. Este problema se abordó con una validación de URL mejorada. • https://support.apple.com/kb/HT209106 https://support.apple.com/kb/HT209107 https://support.apple.com/kb/HT209109 https://support.apple.com/kb/HT209140 https://support.apple.com/kb/HT209141 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2018-4362
https://notcve.org/view.php?id=CVE-2018-4362
An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to Safari 11.1.2, iOS 12. Se abordó un problema de inconsistencia en la interfaz de usuario con una gestión de estado mejorada. Este problema afectaba a Safari, en versiones anteriores a la 11.1.2, y iOS en versiones anteriores a la 12. • https://support.apple.com/kb/HT208934 https://support.apple.com/kb/HT209106 • CWE-20: Improper Input Validation •
CVSS: 7.1EPSS: 0%CPEs: 3EXPL: 0CVE-2018-4363
https://notcve.org/view.php?id=CVE-2018-4363
An input validation issue existed in the kernel. This issue was addressed with improved input validation. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5. Existía un problema de validación de entradas en el kernel. Este problema se abordó con una validación de entradas mejorada. • https://support.apple.com/kb/HT209106 https://support.apple.com/kb/HT209107 https://support.apple.com/kb/HT209108 • CWE-20: Improper Input Validation •
CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0CVE-2018-4313
https://notcve.org/view.php?id=CVE-2018-4313
A consistency issue existed in the handling of application snapshots. The issue was addressed with improved handling of message deletions. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5. Existía un problema de consistencia en la gestión de las instantáneas de aplicación. El problema se abordó con una gestión de borrado de mensajes mejorada. • https://support.apple.com/kb/HT209106 https://support.apple.com/kb/HT209107 https://support.apple.com/kb/HT209108 • CWE-20: Improper Input Validation •
CVSS: 6.5EPSS: 0%CPEs: 3EXPL: 0CVE-2018-4305
https://notcve.org/view.php?id=CVE-2018-4305
An input validation issue was addressed with improved input validation. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5. Un problema de validación de entradas se abordó con una validación de entradas mejorada. Este problema afectaba a iOS en versiones anteriores a la 12, tvOS en versiones anteriores a la 12 y watchOS en versiones anteriores a la 5. • https://support.apple.com/kb/HT209106 https://support.apple.com/kb/HT209107 https://support.apple.com/kb/HT209108 • CWE-20: Improper Input Validation •