CVSS: 8.8EPSS: 0%CPEs: 7EXPL: 0CVE-2018-4299 – Apple Safari performProxyCall Internal Object Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2018-4299
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7. Se abordaron múltiples problemas de corrupción de memoria con una gestión de memoria mejorada. El problema afectaba a iOS en versiones anteriores a la 12, tvOS en versiones anteriores a la 12, watchOS en versiones anteriores a la 5, Safari en versiones anteriores a la 12, iTunes para Windows en versiones anteriores a la 12.9 y iCloud para Windows en versiones anteriores a la 7.7. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari. • https://support.apple.com/kb/HT209106 https://support.apple.com/kb/HT209107 https://support.apple.com/kb/HT209108 https://support.apple.com/kb/HT209109 https://support.apple.com/kb/HT209140 https://support.apple.com/kb/HT209141 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2018-4195
https://notcve.org/view.php?id=CVE-2018-4195
An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to Safari 12. Se abordó un problema de inconsistencia en la interfaz de usuario con una gestión de estado mejorada. Este problema afectaba a Safari en versiones anteriores a la 12. • https://support.apple.com/kb/HT209109 • CWE-20: Improper Input Validation •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2018-4362
https://notcve.org/view.php?id=CVE-2018-4362
An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to Safari 11.1.2, iOS 12. Se abordó un problema de inconsistencia en la interfaz de usuario con una gestión de estado mejorada. Este problema afectaba a Safari, en versiones anteriores a la 11.1.2, y iOS en versiones anteriores a la 12. • https://support.apple.com/kb/HT208934 https://support.apple.com/kb/HT209106 • CWE-20: Improper Input Validation •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2018-4329
https://notcve.org/view.php?id=CVE-2018-4329
Clearing a history item may not clear visits with redirect chains. The issue was addressed with improved data deletion. This issue affected versions prior to iOS 12, Safari 12. Limpiar un elemento del historial podría no limpiar las visitas con cadenas de redirección. Este problema se abordó con una supresión de datos mejorada. • https://support.apple.com/kb/HT209106 https://support.apple.com/kb/HT209109 • CWE-19: Data Processing Errors •
CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0CVE-2018-4307
https://notcve.org/view.php?id=CVE-2018-4307
A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12, Safari 12. Un problema de lógica se abordó con una gestión de estado mejorada. Este problema afectaba a iOS en versiones anteriores a la 12 y Safari en versiones anteriores a la 12. • https://support.apple.com/kb/HT209106 https://support.apple.com/kb/HT209109 • CWE-20: Improper Input Validation •