Vendor CVEs

Apple Inc.

All CVEs

8,442 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2018-4460	Apple Inc. macOS	Med	0.42	6.5	0.02	Apr 3, 2019	A denial of service issue was addressed by removing the vulnerable code. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.
CVE-2018-4439	Apple Inc. Safari	Med	0.42	6.5	0.02	Apr 3, 2019	A logic issue was addressed with improved validation. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.
CVE-2018-4429	Apple Inc. watchOS	Med	0.42	6.5	0.01	Apr 3, 2019	A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1.1, watchOS 5.1.2.
CVE-2018-4409	Apple Inc. Safari	Med	0.42	6.5	0.02	Apr 3, 2019	A resource exhaustion issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1, tvOS 12.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.
CVE-2018-4406	Apple Inc. macOS Mojave	Med	0.42	6.5	0.01	Apr 3, 2019	A denial of service issue was addressed with improved validation. This issue affected versions prior to macOS Mojave 10.14.
CVE-2018-4389	Apple Inc. macOS	Med	0.42	6.5	0.01	Apr 3, 2019	An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to macOS Mojave 10.14.1.
CVE-2018-4385	Apple Inc. iOS	Med	0.42	6.5	0.01	Apr 3, 2019	A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.
CVE-2018-4368	Apple Inc. macOS	Med	0.42	6.5	0.02	Apr 3, 2019	A denial of service issue was addressed with improved validation. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1.
CVE-2018-4362	Apple Inc. Safari	Med	0.42	6.5	0.01	Apr 3, 2019	An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to Safari 11.1.2, iOS 12.
CVE-2018-4305	Apple Inc. tvOS	Med	0.42	6.5	0.01	Apr 3, 2019	An input validation issue was addressed with improved input validation. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5.
CVE-2018-4273	Apple Inc. Safari	Med	0.42	6.5	0.02	Apr 3, 2019	Multiple memory corruption issues were addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
CVE-2018-4271	Apple Inc. Safari	Med	0.42	6.5	0.02	Apr 3, 2019	Multiple memory corruption issues were addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
CVE-2018-4270	Apple Inc. tvOS	Med	0.42	6.5	0.02	Apr 3, 2019	A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
CVE-2018-4260	Apple Inc. Safari	Med	0.42	6.5	0.01	Apr 3, 2019	An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to iOS 11.4.1, Safari 11.1.2.
CVE-2018-4195	Apple Inc. Safari	Med	0.42	6.5	0.01	Apr 3, 2019	An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to Safari 12.
CVE-2017-13891	Apple Inc. iOS	Med	0.42	6.5	0.01	Jan 11, 2019	In iOS before 11.2, an inconsistent user interface issue was addressed through improved state management.
CVE-2017-13886	Apple Inc. macOS High Sierra	Med	0.42	6.5	0.01	Jan 11, 2019	In macOS High Sierra before 10.13.2, an access issue existed with privileged WiFi system configuration. This issue was addressed with additional restrictions.
CVE-2016-4644	Apple Inc. tvOS	Med	0.42	6.5	0.01	Jan 11, 2019	In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, a downgrade issue existed with HTTP authentication credentials saved in Keychain. This issue was addressed by storing the authentication types with the credentials.
CVE-2016-4643	Apple Inc. tvOS	Med	0.42	6.5	0.01	Jan 11, 2019	In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, a validation issue existed in the parsing of 407 responses. This issue was addressed through improved response validation.
CVE-2018-4250	Apple Inc. iOS	Med	0.42	6.5	0.01	Jun 8, 2018	An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Messages" component. It allows remote attackers to cause a denial of service via a crafted message.
CVE-2018-4247	Apple Inc. Safari	Med	0.42	6.5	0.01	Jun 8, 2018	An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. The issue involves the "Safari" component. It allows remote attackers to cause a denial of service (persistent Safari outage) via a crafted web site.
CVE-2018-4205	Apple Inc. Safari	Med	0.42	6.5	0.02	Jun 8, 2018	An issue was discovered in certain Apple products. Safari before 11.1.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar via a crafted web site.
CVE-2018-4188	Apple Inc. Safari	Med	0.42	6.5	0.03	Jun 8, 2018	An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the "WebKit" component. It…
CVE-2018-4187	Apple Inc. macOS	Med	0.42	6.5	0.03	Jun 8, 2018	An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. macOS before 10.13.4 Security Update 2018-001 is affected. The issue involves the "LinkPresentation" component. It allows remote attackers to spoof the UI via a crafted URL in a text message.
CVE-2018-4146	Apple Inc. Safari	Med	0.42	6.5	0.01	Apr 3, 2018	An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves…
CVE-2018-4116	Apple Inc. Safari	Med	0.42	6.5	0.01	Apr 3, 2018	An issue was discovered in certain Apple products. Safari before 11.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar via a crafted web site.
CVE-2018-4113	Apple Inc. Safari	Med	0.42	6.5	0.02	Apr 3, 2018	An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves…
CVE-2018-4107	Apple Inc. macOS	Med	0.42	6.5	0.02	Apr 3, 2018	An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "PDFKit" component. It allows remote attackers to bypass intended restrictions on visiting URLs within a PDF document.
CVE-2018-4102	Apple Inc. Safari	Med	0.42	6.5	0.01	Apr 3, 2018	An issue was discovered in certain Apple products. Safari before 11.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar via a crafted web site.
CVE-2017-2493	Apple Inc. Webkit	Med	0.42	6.5	0.01	Apr 3, 2018	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin…
CVE-2017-7158	Apple Inc. Mac OS X	Med	0.42	6.5	0.01	Dec 27, 2017	An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Screen Sharing Server" component. It allows attackers to obtain root privileges for reading files by leveraging screen-sharing access.
CVE-2017-13790	Apple Inc. Safari	Med	0.42	6.5	0.01	Nov 13, 2017	An issue was discovered in certain Apple products. Safari before 11.0.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar via a crafted web site.
CVE-2017-13789	Apple Inc. Safari	Med	0.42	6.5	0.01	Nov 13, 2017	An issue was discovered in certain Apple products. Safari before 11.0.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar via a crafted web site.
CVE-2017-7106	Apple Inc. Safari	Med	0.42	6.5	0.02	Oct 23, 2017	An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. The issue involves the "WebKit" component. It allows remote attackers to spoof the address bar.
CVE-2017-7085	Apple Inc. Safari	Med	0.42	6.5	0.01	Oct 23, 2017	An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar.
CVE-2017-7060	Apple Inc. Safari	Med	0.42	6.5	0.01	Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. The issue involves the "Safari Printing" component. It allows remote attackers to cause a denial of service (excessive print dialogs) via a crafted web site.
CVE-2017-7011	Apple Inc. Safari	Med	0.42	6.5	0.01	Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to spoof the address bar via a crafted web site that uses FRAME elements.
CVE-2017-2517	Apple Inc. Iphone OS	Med	0.42	6.5	0.01	Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar via a crafted web site.
CVE-2017-2511	Apple Inc. Safari	Med	0.42	6.5	0.01	May 22, 2017	An issue was discovered in certain Apple products. Safari before 10.1.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar via a crafted web site.
CVE-2017-2495	Apple Inc. Safari	Med	0.42	6.5	0.01	May 22, 2017	An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "Safari" component. It allows remote attackers to cause a denial of service (application crash) via a crafted web site that improperly…
CVE-2017-2486	Apple Inc. Safari	Med	0.42	6.5	0.02	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to spoof the address bar via a crafted web site.
CVE-2017-2453	Apple Inc. Safari	Med	0.42	6.5	0.02	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof FaceTime prompts in the user interface via a crafted web site.
CVE-2017-2424	Apple Inc. Safari	Med	0.42	6.5	0.02	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves mishandling of OpenGL shaders in the "WebKit" component. It allows remote attackers to obtain sensitive information from process memory via a…
CVE-2017-2418	Apple Inc. macOS	Med	0.42	6.5	0.00	Apr 2, 2017	An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Hypervisor" component. It allows guest OS users to obtain sensitive information from the CR8 control register via unspecified vectors.
CVE-2017-2386	Apple Inc. Safari	Med	0.42	6.5	0.02	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information…
CVE-2017-2359	Apple Inc. Safari	Med	0.42	6.5	0.01	Feb 20, 2017	An issue was discovered in certain Apple products. Safari before 10.0.3 is affected. The issue involves the "Safari" component, which allows remote attackers to spoof the address bar via a crafted web site.
CVE-2017-2350	Apple Inc. Safari	Med	0.42	6.5	0.02	Feb 20, 2017	An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive…
CVE-2016-7627	Apple Inc. watchOS	Med	0.42	6.5	0.01	Feb 20, 2017	An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "CoreGraphics" component. It allows attackers to cause a denial of service (NULL pointer dereference and…
CVE-2016-7623	Apple Inc. Safari	Med	0.42	6.5	0.02	Feb 20, 2017	An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information via a blob URL on a web site.
CVE-2016-7599	Apple Inc. Safari	Med	0.42	6.5	0.02	Feb 20, 2017	An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin…

CVE-2018-4460MedApr 3, 2019
Apple Inc.
macOS
risk 0.42cvss 6.5epss 0.02
A denial of service issue was addressed by removing the vulnerable code. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.
CVE-2018-4439MedApr 3, 2019
Apple Inc.
Safari
risk 0.42cvss 6.5epss 0.02
A logic issue was addressed with improved validation. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.
CVE-2018-4429MedApr 3, 2019
Apple Inc.
watchOS
risk 0.42cvss 6.5epss 0.01
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1.1, watchOS 5.1.2.
CVE-2018-4409MedApr 3, 2019
Apple Inc.
Safari
risk 0.42cvss 6.5epss 0.02
A resource exhaustion issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1, tvOS 12.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.
CVE-2018-4406MedApr 3, 2019
Apple Inc.
macOS Mojave
risk 0.42cvss 6.5epss 0.01
A denial of service issue was addressed with improved validation. This issue affected versions prior to macOS Mojave 10.14.
CVE-2018-4389MedApr 3, 2019
Apple Inc.
macOS
risk 0.42cvss 6.5epss 0.01
An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to macOS Mojave 10.14.1.
CVE-2018-4385MedApr 3, 2019
Apple Inc.
iOS
risk 0.42cvss 6.5epss 0.01
A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.
CVE-2018-4368MedApr 3, 2019
Apple Inc.
macOS
risk 0.42cvss 6.5epss 0.02
A denial of service issue was addressed with improved validation. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1.
CVE-2018-4362MedApr 3, 2019
Apple Inc.
Safari
risk 0.42cvss 6.5epss 0.01
An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to Safari 11.1.2, iOS 12.
CVE-2018-4305MedApr 3, 2019
Apple Inc.
tvOS
risk 0.42cvss 6.5epss 0.01
An input validation issue was addressed with improved input validation. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5.
CVE-2018-4273MedApr 3, 2019
Apple Inc.
Safari
risk 0.42cvss 6.5epss 0.02
Multiple memory corruption issues were addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
CVE-2018-4271MedApr 3, 2019
Apple Inc.
Safari
risk 0.42cvss 6.5epss 0.02
Multiple memory corruption issues were addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
CVE-2018-4270MedApr 3, 2019
Apple Inc.
tvOS
risk 0.42cvss 6.5epss 0.02
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
CVE-2018-4260MedApr 3, 2019
Apple Inc.
Safari
risk 0.42cvss 6.5epss 0.01
An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to iOS 11.4.1, Safari 11.1.2.
CVE-2018-4195MedApr 3, 2019
Apple Inc.
Safari
risk 0.42cvss 6.5epss 0.01
An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to Safari 12.
CVE-2017-13891MedJan 11, 2019
Apple Inc.
iOS
risk 0.42cvss 6.5epss 0.01
In iOS before 11.2, an inconsistent user interface issue was addressed through improved state management.
CVE-2017-13886MedJan 11, 2019
Apple Inc.
macOS High Sierra
risk 0.42cvss 6.5epss 0.01
In macOS High Sierra before 10.13.2, an access issue existed with privileged WiFi system configuration. This issue was addressed with additional restrictions.
CVE-2016-4644MedJan 11, 2019
Apple Inc.
tvOS
risk 0.42cvss 6.5epss 0.01
In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, a downgrade issue existed with HTTP authentication credentials saved in Keychain. This issue was addressed by storing the authentication types with the credentials.
CVE-2016-4643MedJan 11, 2019
Apple Inc.
tvOS
risk 0.42cvss 6.5epss 0.01
In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, a validation issue existed in the parsing of 407 responses. This issue was addressed through improved response validation.
CVE-2018-4250MedJun 8, 2018
Apple Inc.
iOS
risk 0.42cvss 6.5epss 0.01
An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Messages" component. It allows remote attackers to cause a denial of service via a crafted message.
CVE-2018-4247MedJun 8, 2018
Apple Inc.
Safari
risk 0.42cvss 6.5epss 0.01
An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. The issue involves the "Safari" component. It allows remote attackers to cause a denial of service (persistent Safari outage) via a crafted web site.
CVE-2018-4205MedJun 8, 2018
Apple Inc.
Safari
risk 0.42cvss 6.5epss 0.02
An issue was discovered in certain Apple products. Safari before 11.1.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar via a crafted web site.
CVE-2018-4188MedJun 8, 2018
Apple Inc.
Safari
risk 0.42cvss 6.5epss 0.03
An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the "WebKit" component. It…
CVE-2018-4187MedJun 8, 2018
Apple Inc.
macOS
risk 0.42cvss 6.5epss 0.03
An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. macOS before 10.13.4 Security Update 2018-001 is affected. The issue involves the "LinkPresentation" component. It allows remote attackers to spoof the UI via a crafted URL in a text message.
CVE-2018-4146MedApr 3, 2018
Apple Inc.
Safari
risk 0.42cvss 6.5epss 0.01
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves…
CVE-2018-4116MedApr 3, 2018
Apple Inc.
Safari
risk 0.42cvss 6.5epss 0.01
An issue was discovered in certain Apple products. Safari before 11.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar via a crafted web site.
CVE-2018-4113MedApr 3, 2018
Apple Inc.
Safari
risk 0.42cvss 6.5epss 0.02
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves…
CVE-2018-4107MedApr 3, 2018
Apple Inc.
macOS
risk 0.42cvss 6.5epss 0.02
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "PDFKit" component. It allows remote attackers to bypass intended restrictions on visiting URLs within a PDF document.
CVE-2018-4102MedApr 3, 2018
Apple Inc.
Safari
risk 0.42cvss 6.5epss 0.01
An issue was discovered in certain Apple products. Safari before 11.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar via a crafted web site.
CVE-2017-2493MedApr 3, 2018
Apple Inc.
Webkit
risk 0.42cvss 6.5epss 0.01
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin…
CVE-2017-7158MedDec 27, 2017
Apple Inc.
Mac OS X
risk 0.42cvss 6.5epss 0.01
An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Screen Sharing Server" component. It allows attackers to obtain root privileges for reading files by leveraging screen-sharing access.
CVE-2017-13790MedNov 13, 2017
Apple Inc.
Safari
risk 0.42cvss 6.5epss 0.01
An issue was discovered in certain Apple products. Safari before 11.0.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar via a crafted web site.
CVE-2017-13789MedNov 13, 2017
Apple Inc.
Safari
risk 0.42cvss 6.5epss 0.01
An issue was discovered in certain Apple products. Safari before 11.0.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar via a crafted web site.
CVE-2017-7106MedOct 23, 2017
Apple Inc.
Safari
risk 0.42cvss 6.5epss 0.02
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. The issue involves the "WebKit" component. It allows remote attackers to spoof the address bar.
CVE-2017-7085MedOct 23, 2017
Apple Inc.
Safari
risk 0.42cvss 6.5epss 0.01
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar.
CVE-2017-7060MedJul 20, 2017
Apple Inc.
Safari
risk 0.42cvss 6.5epss 0.01
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. The issue involves the "Safari Printing" component. It allows remote attackers to cause a denial of service (excessive print dialogs) via a crafted web site.
CVE-2017-7011MedJul 20, 2017
Apple Inc.
Safari
risk 0.42cvss 6.5epss 0.01
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to spoof the address bar via a crafted web site that uses FRAME elements.
CVE-2017-2517MedJul 20, 2017
Apple Inc.
Iphone OS
risk 0.42cvss 6.5epss 0.01
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar via a crafted web site.
CVE-2017-2511MedMay 22, 2017
Apple Inc.
Safari
risk 0.42cvss 6.5epss 0.01
An issue was discovered in certain Apple products. Safari before 10.1.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar via a crafted web site.
CVE-2017-2495MedMay 22, 2017
Apple Inc.
Safari
risk 0.42cvss 6.5epss 0.01
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "Safari" component. It allows remote attackers to cause a denial of service (application crash) via a crafted web site that improperly…
CVE-2017-2486MedApr 2, 2017
Apple Inc.
Safari
risk 0.42cvss 6.5epss 0.02
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to spoof the address bar via a crafted web site.
CVE-2017-2453MedApr 2, 2017
Apple Inc.
Safari
risk 0.42cvss 6.5epss 0.02
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof FaceTime prompts in the user interface via a crafted web site.
CVE-2017-2424MedApr 2, 2017
Apple Inc.
Safari
risk 0.42cvss 6.5epss 0.02
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves mishandling of OpenGL shaders in the "WebKit" component. It allows remote attackers to obtain sensitive information from process memory via a…
CVE-2017-2418MedApr 2, 2017
Apple Inc.
macOS
risk 0.42cvss 6.5epss 0.00
An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Hypervisor" component. It allows guest OS users to obtain sensitive information from the CR8 control register via unspecified vectors.
CVE-2017-2386MedApr 2, 2017
Apple Inc.
Safari
risk 0.42cvss 6.5epss 0.02
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information…
CVE-2017-2359MedFeb 20, 2017
Apple Inc.
Safari
risk 0.42cvss 6.5epss 0.01
An issue was discovered in certain Apple products. Safari before 10.0.3 is affected. The issue involves the "Safari" component, which allows remote attackers to spoof the address bar via a crafted web site.
CVE-2017-2350MedFeb 20, 2017
Apple Inc.
Safari
risk 0.42cvss 6.5epss 0.02
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive…
CVE-2016-7627MedFeb 20, 2017
Apple Inc.
watchOS
risk 0.42cvss 6.5epss 0.01
An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "CoreGraphics" component. It allows attackers to cause a denial of service (NULL pointer dereference and…
CVE-2016-7623MedFeb 20, 2017
Apple Inc.
Safari
risk 0.42cvss 6.5epss 0.02
An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information via a blob URL on a web site.
CVE-2016-7599MedFeb 20, 2017
Apple Inc.
Safari
risk 0.42cvss 6.5epss 0.02
An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin…

Page 59 of 169