| Max CVSS | 9.3 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2018-4111 | 4.3 |
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Mail" component. It allows man-in-the-middle attackers to read S/MIME encrypted message content by sending HTML e-mail that references remote
|
24-08-2020 - 17:37 | 03-04-2018 - 06:29 | |
| CVE-2018-4106 | 6.8 |
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the Bracketed Paste Mode of the "Terminal" component. It allows user-assisted attackers to inject arbitrary commands within pasted content.
|
24-08-2020 - 17:37 | 03-04-2018 - 06:29 | |
| CVE-2018-4170 | 2.1 |
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Admin Framework" component. It allows local users to discover a password by listing a process and its arguments during sysadminctl execution.
|
03-10-2019 - 00:03 | 03-04-2018 - 06:29 | |
| CVE-2018-4152 | 7.6 |
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Notes" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app.
|
03-10-2019 - 00:03 | 03-04-2018 - 06:29 | |
| CVE-2018-4144 | 9.3 |
An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3
|
08-03-2019 - 16:06 | 03-04-2018 - 06:29 | |
| CVE-2018-4139 | 9.3 |
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "kext tools" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption)
|
07-03-2019 - 15:27 | 03-04-2018 - 06:29 | |
| CVE-2018-4105 | 7.5 |
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "APFS" component. It allows attackers to trigger truncation of an APFS volume password via an unspecified injection.
|
04-05-2018 - 15:05 | 03-04-2018 - 06:29 | |
| CVE-2018-4107 | 4.3 |
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "PDFKit" component. It allows remote attackers to bypass intended restrictions on visiting URLs within a PDF document.
|
04-05-2018 - 14:58 | 03-04-2018 - 06:29 | |
| CVE-2018-4108 | 7.5 |
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Disk Management" component. It allows attackers to trigger truncation of an APFS volume password via an unspecified injection.
|
04-05-2018 - 14:55 | 03-04-2018 - 06:29 | |
| CVE-2018-4160 | 9.3 |
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (out-of-bounds read) vi
|
04-05-2018 - 14:42 | 03-04-2018 - 06:29 | |
| CVE-2018-4175 | 6.8 |
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "LaunchServices" component. It allows attackers to bypass the code-signing protection mechanism via a crafted app.
|
04-05-2018 - 14:25 | 03-04-2018 - 06:29 | |
| CVE-2018-4176 | 4.3 |
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Disk Images" component. It allows attackers to trigger an app launch upon mounting a crafted disk image.
|
04-05-2018 - 14:11 | 03-04-2018 - 06:29 | |
| CVE-2018-4136 | 9.3 |
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (out-of-bounds read) vi
|
04-05-2018 - 13:16 | 03-04-2018 - 06:29 | |
| CVE-2018-4112 | 4.3 |
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "ATS" component. It allows attackers to obtain sensitive information by leveraging symlink mishandling.
|
27-04-2018 - 18:43 | 03-04-2018 - 06:29 | |
| CVE-2018-4135 | 9.3 |
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "IOFireWireFamily" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corru
|
27-04-2018 - 17:21 | 03-04-2018 - 06:29 | |
| CVE-2018-4132 | 9.3 |
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory
|
27-04-2018 - 17:21 | 03-04-2018 - 06:29 | |
| CVE-2018-4138 | 4.3 |
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "NVIDIA Graphics Drivers" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.
|
27-04-2018 - 17:20 | 03-04-2018 - 06:29 |