CVSS: 5.9EPSS: 0%CPEs: 7EXPL: 0CVE-2018-4266
https://notcve.org/view.php?id=CVE-2018-4266
A race condition was addressed with additional validation. This issue affected versions prior toiVersions prior to: OS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6. Se abordó una condición de carrera con una validación adicional. Este problema afectaba a las versiones anteriores de: iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 para Windows, iCloud para Windows 7.6. • https://support.apple.com/kb/HT208932 https://support.apple.com/kb/HT208933 https://support.apple.com/kb/HT208934 https://support.apple.com/kb/HT208935 https://support.apple.com/kb/HT208936 https://support.apple.com/kb/HT208938 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2018-4260
https://notcve.org/view.php?id=CVE-2018-4260
An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to iOS 11.4.1, Safari 11.1.2. Se abordó un problema de inconsistencia en la interfaz de usuario con una gestión de estado mejorada. Este problema afectaba a iOS en versiones anteriores a la 11.4.1 y Safari en versiones anteriores a la 11.1.2. • https://support.apple.com/kb/HT208934 https://support.apple.com/kb/HT208938 • CWE-20: Improper Input Validation •
CVSS: 4.3EPSS: 0%CPEs: 8EXPL: 0CVE-2018-4278
https://notcve.org/view.php?id=CVE-2018-4278
In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, sound fetched through audio elements may be exfiltrated cross-origin. This issue was addressed with improved audio taint tracking. En Safari en versiones anteriores a la 11.1.2, iTunes en versiones anteriores a la 12.8 para Windows, iOS en versiones anteriores a la 11.4.1, tvOS en versiones anteriores a la 11.4.1 e iCloud para Windows en versiones anteriores a la 7.6, el sonido capturado mediante elementos de audio podría exfiltrarse con orígenes cruzados. Este problema se abordó mediante la mejora del rastreo de la contaminación de audio. • http://www.securitytracker.com/id/1041232 https://exchange.xforce.ibmcloud.com/vulnerabilities/146479 https://security.gentoo.org/glsa/201808-04 https://support.apple.com/HT208932 https://support.apple.com/HT208933%2C https://support.apple.com/HT208934%2C https://support.apple.com/HT208936%2C https://support.apple.com/HT208938%2C https://usn.ubuntu.com/3743-1 •
CVSS: 6.5EPSS: 0%CPEs: 7EXPL: 0CVE-2018-4271
https://notcve.org/view.php?id=CVE-2018-4271
Multiple memory corruption issues were addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6. Múltiples problemas de corrupción de memoria se abordaron con una validación de entradas mejorada. El problema afectaba a iOS en versiones anteriores a la 11.4.1, tvOS en versiones anteriores a la 11.4.1, watchOS en versiones anteriores a la 4.3.2, Safari en versiones anteriores a la 11.1.2, iTunes para Windows en versiones anteriores a la 12.8 y iCloud para Windows en versiones anteriores a la 7.6. • https://support.apple.com/kb/HT208932 https://support.apple.com/kb/HT208933 https://support.apple.com/kb/HT208934 https://support.apple.com/kb/HT208935 https://support.apple.com/kb/HT208936 https://support.apple.com/kb/HT208938 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2018-4274
https://notcve.org/view.php?id=CVE-2018-4274
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, Safari 11.1.2. Existía un problema suplantación en la gestión de las URL. Este problema se abordó con una validación de entradas mejorada. • https://support.apple.com/kb/HT208934 https://support.apple.com/kb/HT208938 • CWE-20: Improper Input Validation •