Apple vulnerabilities, page 5
9,008 vulnerabilities
Known vulnerabilities in Apple products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 198 products.
CVE-2018-4091applemac_os_x
EPSS score1.71%
An issue was discovered in certain Apple products. macOS before 10.13.3 is affected. The issue involves the "Sandbox" component. It allows bypass of a sandbox protection mechanism.CVE-2018-4319appleicloud+8EPSS score1.07%
A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue affected versions prior to iOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.CVE-2018-4353applemac_os_xEPSS score1.30%
A configuration issue was addressed with additional restrictions. This issue affected versions prior to macOS Mojave 10.14.CVE-2018-4151appleiphone_os+1EPSS score1.10%
An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "iCloud Drive" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app.CVE-2018-4200appleicloud+11EPSS score8.67%
An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. Safari before 11.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site that triggers a WebCore::jsElementScrollHeightGetter use-after-free.CVE-2018-4126appleicloud+5EPSS score1.90%
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5, iTunes 12.9 for Windows, iCloud for Windows 7.7.CVE-2018-4187appleiphone_os+1EPSS score2.42%
An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. macOS before 10.13.4 Security Update 2018-001 is affected. The issue involves the "LinkPresentation" component. It allows remote attackers to spoof the UI via a crafted URL in a text message.CVE-2018-4282appleiphone_os+2EPSS score0.35%
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2.CVE-2018-4138applemac_os_xEPSS score1.07%
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "NVIDIA Graphics Drivers" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.CVE-2018-4434applemac_os_xEPSS score0.31%
An out-of-bounds read was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14.2.CVE-2018-4335appleiphone_osEPSS score0.81%
A validation issue was addressed with improved input sanitization. This issue affected versions prior to iOS 12.CVE-2018-4373appleicloud+9EPSS score1.70%
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.CVE-2018-4269appleicloud+5EPSS score0.97%
A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.CVE-2018-4461appleiphone_os+3EPSS score1.05%
A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.CVE-2018-4115appleiphone_os+3EPSS score2.21%
An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves CFPreferences in the "System Preferences" component. It allows attackers to bypass intended access restrictions by leveraging incorrect configuration-profile persistence.CVE-2018-4196applemac_os_xEPSS score1.43%
An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Accessibility Framework" component. It allows attackers to execute arbitrary code in a privileged context or obtain sensitive information via a crafted app.CVE-2018-4117appleicloud+16EPSS score3.00%
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. watchOS before 4.3 is affected. The issue involves the fetch API in the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.CVE-2018-4147appleicloud+3EPSS score1.54%
In iCloud for Windows before 7.3, Safari before 11.0.3, iTunes before 12.7.3 for Windows, and iOS before 11.2.5, multiple memory corruption issues exist and were addressed with improved memory handling.CVE-2018-4424applemac_os_xEPSS score0.92%
A buffer overflow was addressed with improved size validation. This issue affected versions prior to macOS Mojave 10.14.1.CVE-2018-4217applemac_os_xEPSS score0.95%
In macOS High Sierra before 10.13.5, a privacy issue in the handling of Open Directory records was addressed with improved indexing.