Mac OS X
by Apple Inc.
CVEs (3,257)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2018-4351 | Med | 0.36 | 5.5 | 0.01 | Apr 3, 2019 | A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14. | ||
| CVE-2018-4348 | Med | 0.36 | 5.5 | 0.00 | Apr 3, 2019 | A validation issue was addressed with improved logic. This issue affected versions prior to macOS Mojave 10.14. | ||
| CVE-2018-4346 | Med | 0.36 | 5.5 | 0.01 | Apr 3, 2019 | A validation issue existed which allowed local file access. This was addressed with input sanitization. This issue affected versions prior to macOS Mojave 10.14. | ||
| CVE-2018-4342 | Med | 0.36 | 5.5 | 0.00 | Apr 3, 2019 | A configuration issue was addressed with additional restrictions. This issue affected versions prior to macOS Mojave 10.14.1. | ||
| CVE-2018-4338 | Med | 0.36 | 5.5 | 0.01 | Apr 3, 2019 | A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10.14. | ||
| CVE-2018-4333 | Med | 0.36 | 5.5 | 0.01 | Apr 3, 2019 | A validation issue was addressed with improved input sanitization. This issue affected versions prior to iOS 12, macOS Mojave 10.14. | ||
| CVE-2018-4324 | Med | 0.36 | 5.5 | 0.01 | Apr 3, 2019 | A permissions issue existed in the handling of the Apple ID. This issue was addressed with improved access controls. This issue affected versions prior to macOS Mojave 10.14. | ||
| CVE-2018-4308 | Med | 0.36 | 5.5 | 0.01 | Apr 3, 2019 | An out-of-bounds read was addressed with improved bounds checking. This issue affected versions prior to macOS Mojave 10.14. | ||
| CVE-2018-4289 | Med | 0.36 | 5.5 | 0.01 | Apr 3, 2019 | An information disclosure issue was addressed by removing the vulnerable code. This issue affected versions prior to macOS High Sierra 10.13.6. | ||
| CVE-2018-4283 | Med | 0.36 | 5.5 | 0.00 | Apr 3, 2019 | An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue affected versions prior to macOS High Sierra 10.13.6. | ||
| CVE-2018-4178 | Med | 0.36 | 5.5 | 0.00 | Apr 3, 2019 | A permissions issue existed in which execute permission was incorrectly granted. This issue was addressed with improved permission validation. This issue affected versions prior to macOS High Sierra 10.13.4. | ||
| CVE-2019-6231 | Med | 0.36 | 5.5 | 0.01 | Mar 5, 2019 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to read restricted memory. | ||
| CVE-2019-6220 | Med | 0.36 | 5.5 | 0.01 | Mar 5, 2019 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Mojave 10.14.3. An application may be able to read restricted memory. | ||
| CVE-2018-4256 | Med | 0.36 | 5.5 | 0.00 | Jan 11, 2019 | In macOS High Sierra before 10.13.5, an out-of-bounds read was addressed with improved input validation. | ||
| CVE-2018-4255 | Med | 0.36 | 5.5 | 0.00 | Jan 11, 2019 | In macOS High Sierra before 10.13.5, an out-of-bounds read was addressed with improved input validation. | ||
| CVE-2018-4181 | Med | 0.36 | 5.5 | 0.00 | Jan 11, 2019 | In macOS High Sierra before 10.13.5, an issue existed in CUPS. This issue was addressed with improved access restrictions. | ||
| CVE-2018-4179 | Med | 0.36 | 5.5 | 0.00 | Jan 11, 2019 | In macOS High Sierra before 10.13.4, there was an issue with the handling of smartcard PINs. This issue was addressed with additional logic. | ||
| CVE-2018-4253 | Med | 0.36 | 5.5 | 0.01 | Jun 8, 2018 | An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "AMD" component. It allows local users to bypass intended memory-read restrictions or cause a denial of service (out-of-bounds read of kernel memory) via a crafted app. | ||
| CVE-2018-4251 | Med | 0.36 | 5.5 | 0.01 | Jun 8, 2018 | An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Firmware" component. It allows attackers to modify the EFI flash-memory region that a crafted app that has root access. | ||
| CVE-2018-4235 | Med | 0.36 | 5.5 | 0.00 | Jun 8, 2018 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Messages" component. It allows local users to perform impersonation attacks… |
- risk 0.36cvss 5.5epss 0.01
A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.
- risk 0.36cvss 5.5epss 0.00
A validation issue was addressed with improved logic. This issue affected versions prior to macOS Mojave 10.14.
- risk 0.36cvss 5.5epss 0.01
A validation issue existed which allowed local file access. This was addressed with input sanitization. This issue affected versions prior to macOS Mojave 10.14.
- risk 0.36cvss 5.5epss 0.00
A configuration issue was addressed with additional restrictions. This issue affected versions prior to macOS Mojave 10.14.1.
- risk 0.36cvss 5.5epss 0.01
A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10.14.
- risk 0.36cvss 5.5epss 0.01
A validation issue was addressed with improved input sanitization. This issue affected versions prior to iOS 12, macOS Mojave 10.14.
- risk 0.36cvss 5.5epss 0.01
A permissions issue existed in the handling of the Apple ID. This issue was addressed with improved access controls. This issue affected versions prior to macOS Mojave 10.14.
- risk 0.36cvss 5.5epss 0.01
An out-of-bounds read was addressed with improved bounds checking. This issue affected versions prior to macOS Mojave 10.14.
- risk 0.36cvss 5.5epss 0.01
An information disclosure issue was addressed by removing the vulnerable code. This issue affected versions prior to macOS High Sierra 10.13.6.
- risk 0.36cvss 5.5epss 0.00
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue affected versions prior to macOS High Sierra 10.13.6.
- risk 0.36cvss 5.5epss 0.00
A permissions issue existed in which execute permission was incorrectly granted. This issue was addressed with improved permission validation. This issue affected versions prior to macOS High Sierra 10.13.4.
- risk 0.36cvss 5.5epss 0.01
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to read restricted memory.
- risk 0.36cvss 5.5epss 0.01
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Mojave 10.14.3. An application may be able to read restricted memory.
- risk 0.36cvss 5.5epss 0.00
In macOS High Sierra before 10.13.5, an out-of-bounds read was addressed with improved input validation.
- risk 0.36cvss 5.5epss 0.00
In macOS High Sierra before 10.13.5, an out-of-bounds read was addressed with improved input validation.
- risk 0.36cvss 5.5epss 0.00
In macOS High Sierra before 10.13.5, an issue existed in CUPS. This issue was addressed with improved access restrictions.
- risk 0.36cvss 5.5epss 0.00
In macOS High Sierra before 10.13.4, there was an issue with the handling of smartcard PINs. This issue was addressed with additional logic.
- risk 0.36cvss 5.5epss 0.01
An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "AMD" component. It allows local users to bypass intended memory-read restrictions or cause a denial of service (out-of-bounds read of kernel memory) via a crafted app.
- risk 0.36cvss 5.5epss 0.01
An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Firmware" component. It allows attackers to modify the EFI flash-memory region that a crafted app that has root access.
- risk 0.36cvss 5.5epss 0.00
An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Messages" component. It allows local users to perform impersonation attacks…
Page 77 of 163