CVE Feed

    Dashboard / CVE

    8.8
    High

    CVE-2018-4437

    Last Modified: 21 Nov 2024

    Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.

    Published: 3 Apr 2019
    5.5
    Medium

    CVE-2018-4380

    Last Modified: 21 Nov 2024

    A lock screen issue allowed access to photos and contacts on a locked device. This issue was addressed by restricting options offered on a locked device. This issue affected versions prior to iOS 12.0.1.

    Published: 3 Apr 2019
    4.3
    Medium

    CVE-2018-4397

    Last Modified: 21 Nov 2024

    Analytics data was sent using HTTP rather than HTTPS. This was addressed by sending analytics data using HTTPS. This issue affected versions prior to Apple Support 2.4 for iOS.

    Published: 3 Apr 2019
    8.8
    High

    CVE-2018-4438

    Last Modified: 21 Nov 2024

    A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.

    Published: 3 Apr 2019
    4.3
    Medium

    CVE-2018-4445

    Last Modified: 21 Nov 2024

    "Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2.

    Published: 3 Apr 2019
    7.8
    High

    CVE-2018-4456

    Last Modified: 21 Nov 2024

    A memory corruption issue was addressed with improved input validation. This issue affected versions prior to macOS High Sierra 10.13.6, macOS Mojave 10.14.

    Published: 3 Apr 2019
    3.3
    Low

    CVE-2018-4470

    Last Modified: 21 Nov 2024

    A privacy issue in the handling of Open Directory records was addressed with improved indexing. This issue affected versions prior to macOS High Sierra 10.13.6.

    Published: 3 Apr 2019
    6.5
    Medium

    CVE-2018-4409

    Last Modified: 21 Nov 2024

    A resource exhaustion issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1, tvOS 12.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.

    Published: 3 Apr 2019
    7.8
    High

    CVE-2018-4410

    Last Modified: 21 Nov 2024

    A memory corruption issue was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14.1.

    Published: 3 Apr 2019
    7.8
    High

    CVE-2018-4411

    Last Modified: 21 Nov 2024

    A memory corruption issue was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14.

    Published: 3 Apr 2019
    7.8
    High

    CVE-2018-4412

    Last Modified: 21 Nov 2024

    A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5, iTunes 12.9 for Windows, iCloud for Windows 7.7.

    Published: 3 Apr 2019
    7.8
    High

    CVE-2018-4415

    Last Modified: 21 Nov 2024

    A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.1.

    Published: 3 Apr 2019
    8.8
    High

    CVE-2018-4416

    Last Modified: 21 Nov 2024

    Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.

    Published: 3 Apr 2019
    5.5
    Medium

    CVE-2018-4417

    Last Modified: 21 Nov 2024

    A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10.14.

    Published: 3 Apr 2019
    5.5
    Medium

    CVE-2018-4418

    Last Modified: 21 Nov 2024

    A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10.14.

    Published: 3 Apr 2019
    7.8
    High

    CVE-2018-4419

    Last Modified: 21 Nov 2024

    A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1.

    Published: 3 Apr 2019
    7.8
    High

    CVE-2018-4420

    Last Modified: 21 Nov 2024

    A memory corruption issue was addressed by removing the vulnerable code. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1.

    Published: 3 Apr 2019
    7.8
    High

    CVE-2018-4421

    Last Modified: 21 Nov 2024

    A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.1.

    Published: 3 Apr 2019
    8.8
    High

    CVE-2018-4422

    Last Modified: 21 Nov 2024

    A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.1.

    Published: 3 Apr 2019
    7.8
    High

    CVE-2018-4423

    Last Modified: 21 Nov 2024

    A logic issue was addressed with improved validation. This issue affected versions prior to macOS Mojave 10.14.1.

    Published: 3 Apr 2019
    7.8
    High

    CVE-2018-4424

    Last Modified: 21 Nov 2024

    A buffer overflow was addressed with improved size validation. This issue affected versions prior to macOS Mojave 10.14.1.

    Published: 3 Apr 2019
    7.8
    High

    CVE-2018-4425

    Last Modified: 21 Nov 2024

    A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

    Published: 3 Apr 2019
    7.8
    High

    CVE-2018-4426

    Last Modified: 21 Nov 2024

    A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

    Published: 3 Apr 2019
    2.4
    Low

    CVE-2018-4430

    Last Modified: 21 Nov 2024

    A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.1.

    Published: 3 Apr 2019
    5.5
    Medium

    CVE-2018-4431

    Last Modified: 21 Nov 2024

    A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.

    Published: 3 Apr 2019
    7.1
    High

    CVE-2018-4434

    Last Modified: 21 Nov 2024

    An out-of-bounds read was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14.2.

    Published: 3 Apr 2019
    7.8
    High

    CVE-2018-4435

    Last Modified: 21 Nov 2024

    A logic issue was addressed with improved restrictions. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.

    Published: 3 Apr 2019
    7.5
    High

    CVE-2018-4436

    Last Modified: 21 Nov 2024

    A certificate validation issue existed in configuration profiles. This was addressed with additional checks. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2.

    Published: 3 Apr 2019
    5.5
    Medium

    CVE-2018-4413

    Last Modified: 21 Nov 2024

    A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1.

    Published: 3 Apr 2019
    7.8
    High

    CVE-2018-4414

    Last Modified: 21 Nov 2024

    A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5, iTunes 12.9 for Windows, iCloud for Windows 7.7.

    Published: 3 Apr 2019
    6.5
    Medium

    CVE-2018-4429

    Last Modified: 21 Nov 2024

    A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1.1, watchOS 5.1.2.

    Published: 3 Apr 2019
    6.1
    Medium

    CVE-2018-4377

    Last Modified: 21 Nov 2024

    A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affected versions prior to iOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.

    Published: 3 Apr 2019
    8.8
    High

    CVE-2018-4378

    Last Modified: 21 Nov 2024

    A memory corruption issue was addressed with improved validation. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.

    Published: 3 Apr 2019
    7.8
    High

    CVE-2018-4383

    Last Modified: 21 Nov 2024

    A memory corruption issue was addressed with improved state management. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

    Published: 3 Apr 2019
    7.8
    High

    CVE-2018-4384

    Last Modified: 21 Nov 2024

    A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1, watchOS 5.1.

    Published: 3 Apr 2019
    6.5
    Medium

    CVE-2018-4385

    Last Modified: 21 Nov 2024

    A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.

    Published: 3 Apr 2019
    8.8
    High

    CVE-2018-4386

    Last Modified: 21 Nov 2024

    Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.

    Published: 3 Apr 2019
    2.4
    Low

    CVE-2018-4387

    Last Modified: 21 Nov 2024

    A lock screen issue allowed access to photos via Reply With Message on a locked device. This issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.

    Published: 3 Apr 2019
    7.8
    High

    CVE-2018-4393

    Last Modified: 21 Nov 2024

    A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.

    Published: 3 Apr 2019
    7.8
    High

    CVE-2018-4394

    Last Modified: 21 Nov 2024

    A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1, iTunes 12.9.1.

    Published: 3 Apr 2019
    5.5
    Medium

    CVE-2018-4395

    Last Modified: 21 Nov 2024

    This issue was addressed with improved checks. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

    Published: 3 Apr 2019
    7.5
    High

    CVE-2018-4398

    Last Modified: 21 Nov 2024

    An issue existed in the method for determining prime numbers. This issue was addressed by using pseudorandom bases for testing of primes. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1, iTunes 12.9.1, iCloud for Windows 7.8.

    Published: 3 Apr 2019
    5.5
    Medium

    CVE-2018-4399

    Last Modified: 21 Nov 2024

    An access issue existed with privileged API calls. This issue was addressed with additional restrictions. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

    Published: 3 Apr 2019
    5.5
    Medium

    CVE-2018-4400

    Last Modified: 21 Nov 2024

    A validation issue was addressed with improved logic. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, watchOS 5.1.

    Published: 3 Apr 2019
    7.8
    High

    CVE-2018-4401

    Last Modified: 21 Nov 2024

    A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

    Published: 3 Apr 2019
    7.8
    High

    CVE-2018-4402

    Last Modified: 21 Nov 2024

    A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.1.

    Published: 3 Apr 2019
    5.5
    Medium

    CVE-2018-4403

    Last Modified: 21 Nov 2024

    This issue was addressed by removing additional entitlements. This issue affected versions prior to macOS Mojave 10.14.1.

    Published: 3 Apr 2019
    7.8
    High

    CVE-2018-4408

    Last Modified: 21 Nov 2024

    A memory corruption issue was addressed with improved input validation This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

    Published: 3 Apr 2019
    8.8
    High

    CVE-2018-4392

    Last Modified: 21 Nov 2024

    Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.

    Published: 3 Apr 2019
    5.5
    Medium

    CVE-2018-4396

    Last Modified: 21 Nov 2024

    A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10.14.

    Published: 3 Apr 2019