deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-4286
Published: 2019-04-03
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://packetstormsecurity.com/files/172831/macOS-NFS-Client-Buffer-Overflow.html; https://support.apple.com/kb/HT208937; https://support.apple.com/kb/HT209193
CVE: CVE-2018-4287
Published: 2019-04-03
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://packetstormsecurity.com/files/172831/macOS-NFS-Client-Buffer-Overflow.html; https://support.apple.com/kb/HT208937; https://support.apple.com/kb/HT209193
CVE: CVE-2018-4288
Published: 2019-04-03
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://packetstormsecurity.com/files/172831/macOS-NFS-Client-Buffer-Overflow.html; https://support.apple.com/kb/HT208937; https://support.apple.com/kb/HT209193
CVE: CVE-2018-4289
Published: 2019-04-03
Description: An information disclosure issue was addressed by removing the vulnerable code. This issue affected versions prior to macOS High Sierra 10.13.6.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/kb/HT208937; https://support.apple.com/kb/HT208937
CVE: CVE-2018-4290
Published: 2019-04-03
Description: A denial of service issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, watchOS 4.3.2.
CVSS Score: 5.9 (MEDIUM)
References: https://support.apple.com/kb/HT208935; https://support.apple.com/kb/HT208938; https://support.apple.com/kb/HT208935
CVE: CVE-2018-4291
Published: 2019-04-03
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://packetstormsecurity.com/files/172831/macOS-NFS-Client-Buffer-Overflow.html; https://support.apple.com/kb/HT208937; https://support.apple.com/kb/HT209193
CVE: CVE-2018-4293
Published: 2019-04-03
Description: A cookie management issue was addressed with improved checks. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://support.apple.com/kb/HT208932; https://support.apple.com/kb/HT208933; https://support.apple.com/kb/HT208935
CVE: CVE-2018-4295
Published: 2019-04-03
Description: An input validation issue was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://support.apple.com/kb/HT209139; https://support.apple.com/kb/HT209193; https://support.apple.com/kb/HT209139
CVE: CVE-2018-4299
Published: 2019-04-03
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209107; https://support.apple.com/kb/HT209108
CVE: CVE-2018-4300
Published: 2019-04-03
Description: The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access to the web interface when the web interface is enabled. This issue affected versions prior to v2.2.10.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/107785; https://github.com/apple/cups/releases/tag/v2.2.10; https://lists.debian.org/debian-lts-announce/2019/09/msg00028.html
CVE: CVE-2018-4303
Published: 2019-04-03
Description: An input validation issue was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14, iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://support.apple.com/kb/HT209340; https://support.apple.com/kb/HT209341; https://support.apple.com/kb/HT209342
CVE: CVE-2018-4304
Published: 2019-04-03
Description: A denial of service issue was addressed with improved validation. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209107; https://support.apple.com/kb/HT209108
CVE: CVE-2018-4305
Published: 2019-04-03
Description: An input validation issue was addressed with improved input validation. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209107; https://support.apple.com/kb/HT209108
CVE: CVE-2018-4306
Published: 2019-04-03
Description: A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209107; https://support.apple.com/kb/HT209109
CVE: CVE-2018-4307
Published: 2019-04-03
Description: A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12, Safari 12.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209109; https://support.apple.com/kb/HT209106
CVE: CVE-2018-4308
Published: 2019-04-03
Description: An out-of-bounds read was addressed with improved bounds checking. This issue affected versions prior to macOS Mojave 10.14.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/kb/HT209139; https://support.apple.com/kb/HT209193; https://support.apple.com/kb/HT209139
CVE: CVE-2018-4309
Published: 2019-04-03
Description: A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209107; https://support.apple.com/kb/HT209109
CVE: CVE-2018-4310
Published: 2019-04-03
Description: An access issue was addressed with additional sandbox restrictions. This issue affected versions prior to iOS 12, macOS Mojave 10.14.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-269
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209139; https://support.apple.com/kb/HT209193
CVE: CVE-2018-4311
Published: 2019-04-03
Description: The issue was addressed by removing origin information. This issue affected versions prior to iOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
CVSS Score: 8.1 (HIGH)
CWE: CWE-200
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209108; https://support.apple.com/kb/HT209109
CVE: CVE-2018-4312
Published: 2019-04-03
Description: A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209107; https://support.apple.com/kb/HT209109
CVE: CVE-2018-4313
Published: 2019-04-03
Description: A consistency issue existed in the handling of application snapshots. The issue was addressed with improved handling of message deletions. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209107; https://support.apple.com/kb/HT209108
CVE: CVE-2018-4314
Published: 2019-04-03
Description: A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209107; https://support.apple.com/kb/HT209109
CVE: CVE-2018-4315
Published: 2019-04-03
Description: A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209107; https://support.apple.com/kb/HT209109
CVE: CVE-2018-4316
Published: 2019-04-03
Description: A memory corruption issue was addressed with improved state management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209107; https://support.apple.com/kb/HT209109
CVE: CVE-2018-4317
Published: 2019-04-03
Description: A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209107; https://support.apple.com/kb/HT209109
CVE: CVE-2018-4318
Published: 2019-04-03
Description: A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209107; https://support.apple.com/kb/HT209109
CVE: CVE-2018-4319
Published: 2019-04-03
Description: A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue affected versions prior to iOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
CVSS Score: 8.1 (HIGH)
CWE: CWE-346
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209108; https://support.apple.com/kb/HT209109
CVE: CVE-2018-4321
Published: 2019-04-03
Description: A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209107; https://support.apple.com/kb/HT209139
CVE: CVE-2018-4322
Published: 2019-04-03
Description: This issue was addressed with improved entitlements. This issue affected versions prior to iOS 12.
CVSS Score: 3.3 (LOW)
CWE: CWE-20
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209106
CVE: CVE-2018-4323
Published: 2019-04-03
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209107; https://support.apple.com/kb/HT209109
CVE: CVE-2018-4324
Published: 2019-04-03
Description: A permissions issue existed in the handling of the Apple ID. This issue was addressed with improved access controls. This issue affected versions prior to macOS Mojave 10.14.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732
References: https://support.apple.com/kb/HT209139; https://support.apple.com/kb/HT209139
CVE: CVE-2018-4325
Published: 2019-04-03
Description: A logic issue was addressed with improved restrictions. This issue affected versions prior to iOS 12.
CVSS Score: 2.4 (LOW)
CWE: CWE-200
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209106
CVE: CVE-2018-4326
Published: 2019-04-03
Description: A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209139; https://support.apple.com/kb/HT209193
CVE: CVE-2018-4327
Published: 2019-04-03
Description: A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/kb/HT208938; https://support.apple.com/kb/HT208938
CVE: CVE-2018-4328
Published: 2019-04-03
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209107; https://support.apple.com/kb/HT209109
CVE: CVE-2018-4329
Published: 2019-04-03
Description: Clearing a history item may not clear visits with redirect chains. The issue was addressed with improved data deletion. This issue affected versions prior to iOS 12, Safari 12.
CVSS Score: 7.5 (HIGH)
CWE: CWE-19
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209109; https://support.apple.com/kb/HT209106
CVE: CVE-2018-4331
Published: 2019-04-03
Description: A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209107; https://support.apple.com/kb/HT209108
CVE: CVE-2018-4332
Published: 2019-04-03
Description: A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209107; https://support.apple.com/kb/HT209108
CVE: CVE-2018-4333
Published: 2019-04-03
Description: A validation issue was addressed with improved input sanitization. This issue affected versions prior to iOS 12, macOS Mojave 10.14.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209139; https://support.apple.com/kb/HT209106
CVE: CVE-2018-4334
Published: 2019-04-03
Description: A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/kb/HT209139; https://support.apple.com/kb/HT209193; https://support.apple.com/kb/HT209139
CVE: CVE-2018-4335
Published: 2019-04-03
Description: A validation issue was addressed with improved input sanitization. This issue affected versions prior to iOS 12.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209106
CVE: CVE-2018-4336
Published: 2019-04-03
Description: A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209107; https://support.apple.com/kb/HT209108
CVE: CVE-2018-4337
Published: 2019-04-03
Description: A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209107; https://support.apple.com/kb/HT209108
CVE: CVE-2018-4338
Published: 2019-04-03
Description: A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10.14.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://support.apple.com/kb/HT209139; https://support.apple.com/kb/HT209139
CVE: CVE-2018-4340
Published: 2019-04-03
Description: A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209107; https://support.apple.com/kb/HT209108
CVE: CVE-2018-4341
Published: 2019-04-03
Description: A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
CVSS Score: 8.6 (HIGH)
CWE: CWE-119
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209107; https://support.apple.com/kb/HT209108
CVE: CVE-2018-4342
Published: 2019-04-03
Description: A configuration issue was addressed with additional restrictions. This issue affected versions prior to macOS Mojave 10.14.1.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://support.apple.com/kb/HT209193; https://support.apple.com/kb/HT209193
CVE: CVE-2018-4343
Published: 2019-04-03
Description: A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209107; https://support.apple.com/kb/HT209108
CVE: CVE-2018-4344
Published: 2019-04-03
Description: A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209107; https://support.apple.com/kb/HT209108
CVE: CVE-2018-4345
Published: 2019-04-03
Description: A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209107; https://support.apple.com/kb/HT209109
CVE: CVE-2018-4346
Published: 2019-04-03
Description: A validation issue existed which allowed local file access. This was addressed with input sanitization. This issue affected versions prior to macOS Mojave 10.14.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://support.apple.com/kb/HT209139; https://support.apple.com/kb/HT209193; https://support.apple.com/kb/HT209139
CVE: CVE-2018-4347
Published: 2019-04-03
Description: A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5, iTunes 12.9 for Windows, iCloud for Windows 7.7.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209107; https://support.apple.com/kb/HT209108
CVE: CVE-2018-4348
Published: 2019-04-03
Description: A validation issue was addressed with improved logic. This issue affected versions prior to macOS Mojave 10.14.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://support.apple.com/kb/HT209139; https://support.apple.com/kb/HT209193; https://support.apple.com/kb/HT209139
CVE: CVE-2018-4350
Published: 2019-04-03
Description: A memory corruption issue was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/kb/HT209139; https://support.apple.com/kb/HT209193; https://support.apple.com/kb/HT209139
CVE: CVE-2018-4351
Published: 2019-04-03
Description: A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-665
References: https://support.apple.com/kb/HT209139; https://support.apple.com/kb/HT209139
CVE: CVE-2018-4352
Published: 2019-04-03
Description: A consistency issue existed in the handling of application snapshots. The issue was addressed with improved handling of notes deletions. This issue affected versions prior to iOS 12.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209106
CVE: CVE-2018-4353
Published: 2019-04-03
Description: A configuration issue was addressed with additional restrictions. This issue affected versions prior to macOS Mojave 10.14.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://support.apple.com/kb/HT209139; https://support.apple.com/kb/HT209139
CVE: CVE-2018-4354
Published: 2019-04-03
Description: A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
CVSS Score: 8.6 (HIGH)
CWE: CWE-119
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209107; https://support.apple.com/kb/HT209108
CVE: CVE-2018-4355
Published: 2019-04-03
Description: A configuration issue was addressed with additional restrictions. This issue affected versions prior to iOS 12, macOS Mojave 10.14.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209139; https://support.apple.com/kb/HT209106
CVE: CVE-2018-4356
Published: 2019-04-03
Description: A permissions issue existed. This issue was addressed with improved permission validation. This issue affected versions prior to iOS 12.
CVSS Score: 5.3 (MEDIUM)
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209106
CVE: CVE-2018-4357
Published: 2019-04-03
Description: A memory corruption issue was addressed with improved input validation. This issue affected versions prior to Xcode 10.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/kb/HT209135; https://support.apple.com/kb/HT209135
CVE: CVE-2018-4358
Published: 2019-04-03
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209107; https://support.apple.com/kb/HT209108
CVE: CVE-2018-4359
Published: 2019-04-03
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209107; https://support.apple.com/kb/HT209108
CVE: CVE-2018-4360
Published: 2019-04-03
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://devcraft.io/2019/02/19/cve-2018-4360-webkit-information-leakage-with-dommatrixinvertself.html; https://github.com/WebKit/webkit/commit/a0b0e01648892b0bb60a01aca619eec85eb27f7a; https://support.apple.com/kb/HT209106