Search vulnerabilities

Results 5,071

Export CSV
CVE-2018-4271

Multiple memory corruption issues were addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.

CVSS 3.0 · 6.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Products
Icloud Iphone Os Itunes and 4 more
CVE-2018-4270

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.

CVSS 3.0 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Products
Icloud Iphone Os Itunes and 4 more
CVE-2018-4269

A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.

CVSS 3.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Products
Icloud Iphone Os Itunes and 4 more
CVE-2018-4267

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.

CVSS 3.0 · 8.8 High EPSS 2.0% KEV · Not listed
Vendors
Products
Icloud Iphone Os Itunes and 3 more
CVE-2018-4266

A race condition was addressed with additional validation. This issue affected versions prior toiVersions prior to: OS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.

CVSS 3.0 · 5.9 Medium EPSS 1.8% KEV · Not listed
Vendors
Products
Icloud Iphone Os Itunes and 4 more
CVE-2018-4265

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.

CVSS 3.0 · 8.8 High EPSS 2.1% KEV · Not listed
Vendors
Products
Icloud Iphone Os Itunes and 3 more
CVE-2018-4264

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.

CVSS 3.0 · 8.8 High EPSS 2.1% KEV · Not listed
Vendors
Products
Icloud Iphone Os Itunes and 4 more
CVE-2018-4263

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.

CVSS 3.0 · 8.8 High EPSS 2.0% KEV · Not listed
Vendors
Products
Icloud Iphone Os Itunes and 3 more
CVE-2018-4262

In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.0 · 8.8 High EPSS 2.6% KEV · Not listed
Products
Icloud Iphone Os Itunes and 5 more
CVE-2018-4261

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.

CVSS 3.0 · 8.8 High EPSS 2.0% KEV · Not listed
Vendors
Products
Icloud Iphone Os Itunes and 3 more
CVE-2018-4260

An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to iOS 11.4.1, Safari 11.1.2.

CVSS 3.0 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2018-4252

An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and obtain private notification content via Siri.

CVSS 3.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2018-4250

An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Messages" component. It allows remote attackers to cause a denial of service via a crafted message.

CVSS 3.0 · 6.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Products
CVE-2018-4249

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves pktmnglr_ipfilter_input in com.apple.packet-mangler in the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (integer overflow and stack-based buffer overflow) via a crafted app.

CVSS 3.0 · 7.8 High EPSS 2.1% KEV · Not listed
Vendors
Products
CVE-2018-4248

An out-of-bounds read was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2.

CVSS 3.0 · 7.5 High EPSS 2.4% KEV · Not listed
Vendors
Products
Iphone Os Mac Os X Tvos and 1 more
CVE-2018-4247

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. The issue involves the "Safari" component. It allows remote attackers to cause a denial of service (persistent Safari outage) via a crafted web site.

CVSS 3.0 · 6.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Products
CVE-2018-4246

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code via a crafted web site that leverages type confusion.

CVSS 3.0 · 8.8 High EPSS 3.0% KEV · Not listed
Products
Icloud Iphone Os Itunes and 5 more
CVE-2018-4244

An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri Contacts" component. It allows physically proximate attackers to discover private contact information via Siri.

CVSS 3.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2018-4243

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Kernel" component. A buffer overflow in getvolattrlist allows attackers to execute arbitrary code in a privileged context via a crafted app.

CVSS 3.0 · 7.8 High EPSS 18.2% KEV · Not listed
Vendors
Products
CVE-2018-4241

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Kernel" component. A buffer overflow in mptcp_usr_connectx allows attackers to execute arbitrary code in a privileged context via a crafted app.

CVSS 3.0 · 7.8 High EPSS 8.0% KEV · Not listed
Vendors
Products