CVSS: 6.3EPSS: 0%CPEs: 1EXPL: 0CVE-2018-4283 – Apple macOS IOGraphics IDState Out-Of-Bounds Read Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2018-4283
09 Jul 2018 — An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue affected versions prior to macOS High Sierra 10.13.6. Existía un problema de lectura fuera de límites que conducía a la divulgación de memoria del kernel. Este problema se abordó con una validación de entradas mejorada. • https://support.apple.com/kb/HT208937 • CWE-125: Out-of-bounds Read •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2018-4268 – Apple macOS APFS methodVolumeCreate Use-After-Free Privilege Escalation Vulnerability
https://notcve.org/view.php?id=CVE-2018-4268
09 Jul 2018 — A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6. Un problema de corrupción de memoria se abordó con una gestión de memoria mejorada. Este problema afectaba a macOS High Sierra en versiones anteriores a la 10.13.6. This vulnerability allows local attackers to escalate privileges on vulnerable installations of Apple macOS. • https://support.apple.com/kb/HT208937 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 0%CPEs: 5EXPL: 0CVE-2018-4277 – Apple Security Advisory 2018-10-30-14
https://notcve.org/view.php?id=CVE-2018-4277
09 Jul 2018 — In iOS before 11.4.1, watchOS before 4.3.2, tvOS before 11.4.1, Safari before 11.1.1, macOS High Sierra before 10.13.6, a spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. En iOS en versiones anteriores a la 11.4.1, watchOS en versiones anteriores a la 4.3.2, tvOS en versiones anteriores a la 11.4.1, Safari en versiones anteriores a la 11.1.1 y macOS High Sierra en versiones anteriores a la 10.13.6, existía un problema de suplantación en el manejo de UR... • http://www.securitytracker.com/id/1041232 • CWE-20: Improper Input Validation •
CVSS: 7.1EPSS: 0%CPEs: 1EXPL: 0CVE-2018-4289 – Apple Security Advisory 2018-10-30-14
https://notcve.org/view.php?id=CVE-2018-4289
09 Jul 2018 — An information disclosure issue was addressed by removing the vulnerable code. This issue affected versions prior to macOS High Sierra 10.13.6. Se abordaron múltiples problemas de corrupción de memoria con una gestión de memoria mejorada. Este problema afectaba a macOS High Sierra en versiones anteriores a la 10.13.6. macOS High Sierra 10.13.6, Security Update 2018-004 Sierra, Security Update 2018-004 El Capitan address buffer overflow, code execution, denial of service, information leakage, and null pointe... • https://support.apple.com/kb/HT208937 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 1CVE-2018-4280 – Apple Security Advisory 2018-10-30-14
https://notcve.org/view.php?id=CVE-2018-4280
09 Jul 2018 — A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2. Un problema de corrupción de memoria se abordó con una gestión de memoria mejorada. Este problema afectaba a iOS en versiones anteriores a la 11.4.1; macOS High Sierra en versiones anteriores a la 10.13.6; tvOS en versiones anteriores a la 11.4.1 y watchOS en versiones anteriores a la 4.3.2. macOS High Sierra 10.13.6, Security Update ... • https://github.com/bazad/launchd-portrep • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 1CVE-2018-4248 – Apple Security Advisory 2018-10-30-14
https://notcve.org/view.php?id=CVE-2018-4248
09 Jul 2018 — An out-of-bounds read was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2. Se abordó un problema de lectura fuera de límites con una validación de entradas mejorada. Este problema afectaba a iOS en versiones anteriores a la 11.4.1, macOS High Sierra en versiones anteriores a la 10.13.6, tvOS en versiones anteriores a la 11.4.1 y watchOS en versiones anteriores a la 4.3.2. macOS High Sierra 10.13.6, Security Upd... • https://github.com/bazad/xpc-string-leak • CWE-125: Out-of-bounds Read •
CVSS: 5.3EPSS: 0%CPEs: 7EXPL: 0CVE-2018-4293 – Apple Security Advisory 2018-10-30-14
https://notcve.org/view.php?id=CVE-2018-4293
09 Jul 2018 — A cookie management issue was addressed with improved checks. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2, iTunes 12.8 for Windows, iCloud for Windows 7.6. Un problema de gestión de cookie se abordó con comprobaciones mejoradas. El problema afectaba a versiones anteriores a iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2, iTunes 12.8 para Windows, iCloud para Windows 7.6. macOS High Sierra 10.13.6, Security Update 2018-004 Sierra,... • https://support.apple.com/kb/HT208932 • CWE-20: Improper Input Validation •
CVSS: 7.5EPSS: 4%CPEs: 14EXPL: 1CVE-2018-12015 – perl: Directory traversal in Archive::Tar
https://notcve.org/view.php?id=CVE-2018-12015
07 Jun 2018 — In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, via an archive file containing a symlink and a regular file with the same name. En Perl hasta la versión 5.26.2, el módulo Archive::Tar permite que atacantes remotos omitan un mecanismo de protección de salto de directorio y sobrescriban archivos arbitrarios mediante un archivo comprimido que contiene un symlink y un archivo normal con el mismo nombre. ... • http://seclists.org/fulldisclosure/2019/Mar/49 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-59: Improper Link Resolution Before File Access ('Link Following') •
CVSS: 7.8EPSS: 1%CPEs: 4EXPL: 2CVE-2018-4237 – Apple macOS task_set_special_port Port Overwrite Privilege Escalation Vulnerability
https://notcve.org/view.php?id=CVE-2018-4237
01 Jun 2018 — An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "libxpc" component. It allows attackers to gain privileges via a crafted app that leverages a logic error. Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.4, las versiones de macOS anteriores a la 10.13.5, las versiones de tvOS anteriores a la 11.4 y las versio... • https://packetstorm.news/files/id/150488 •
CVSS: 9.3EPSS: 6%CPEs: 4EXPL: 4CVE-2018-4243 – Apple macOS/iOS Kernel - Heap Overflow Due to Lack of Lower Size Check in getvolattrlist
https://notcve.org/view.php?id=CVE-2018-4243
01 Jun 2018 — An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Kernel" component. A buffer overflow in getvolattrlist allows attackers to execute arbitrary code in a privileged context via a crafted app. Se ha descubierto un problema en algunos productos Apple. Las versiones de iOS anteriores a la 11.4, las versiones de macOS anteriores a la 10.13.5, las versiones de tvO... • https://packetstorm.news/files/id/148062 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •