apple
8,695 tracked vulnerabilities.
CVE-2018-4133
MEDIUM
Safari < 11.1 - Cross-Site Scripting via Crafted URL
Apr 03, 2018
CVSS 6.1
EPSS 0.01
CVE-2018-4132
HIGH
macOS < 10.13.4 - Memory Corruption in Intel Graphics Driver
Apr 03, 2018
CVSS 7.8
EPSS 0.01
CVE-2018-4131
HIGH
iPhone OS < 11.3 and macOS < 10.13.4 - Secure Input Mode Bypass via WindowServer Key State Scanning
Apr 03, 2018
CVSS 7.8
EPSS 0.01
CVE-2018-4130
HIGH
Safari < 11.1 - Remote Code Execution via WebKit Memory Corruption
Apr 03, 2018
CVSS 8.8
EPSS 0.02
CVE-2018-4129
HIGH
Safari < 11.1 - Remote Code Execution via Crafted Web Site
Apr 03, 2018
CVSS 8.8
EPSS 0.02
CVE-2018-4128
HIGH
Safari < 11.1 - Remote Code Execution via WebKit Memory Corruption
Apr 03, 2018
CVSS 8.8
EPSS 0.02
CVE-2018-4127
HIGH
Safari < 11.1 - Remote Code Execution via WebKit Memory Corruption
Apr 03, 2018
CVSS 8.8
EPSS 0.02
CVE-2018-4125
HIGH
Safari < 11.1 - Remote Code Execution via Crafted Web Site
Apr 03, 2018
CVSS 8.8
EPSS 0.02
CVE-2018-4124
CRITICAL
iPhone OS < 11.2.6, macOS < 10.13.3, tvOS < 11.2.6, watchOS < 4.2.3 - Denial of Service via Telugu Character Processing
Apr 03, 2018
CVSS 9.8
EPSS 0.07
CVE-2018-4123
LOW
iPhone OS < 11.3 - Unauthorized iTunes Email Address Exposure via Clock Alarm Handling
Apr 03, 2018
CVSS 2.4
EPSS 0.00
CVE-2018-4122
HIGH
Safari < 11.1 - Remote Code Execution via Crafted Web Site
Apr 03, 2018
CVSS 8.8
EPSS 0.02
CVE-2018-4121
HIGH
Safari < 11.1 - Remote Code Execution via WebKit Memory Corruption
Apr 03, 2018
CVSS 8.8
EPSS 0.13
CVE-2018-4120
HIGH
Safari < 11.1 - Remote Code Execution via WebKit Memory Corruption
Apr 03, 2018
CVSS 8.8
EPSS 0.02
CVE-2018-4119
HIGH
Safari < 11.1 - Remote Code Execution via Crafted Web Site
Apr 03, 2018
CVSS 8.8
EPSS 0.02
CVE-2018-4118
HIGH
Safari < 11.1 - Remote Code Execution via WebKit Memory Corruption
Apr 03, 2018
CVSS 8.8
EPSS 0.02
CVE-2018-4117
MEDIUM
Safari < 11.1 - Same Origin Policy Bypass via Fetch API
Apr 03, 2018
CVSS 6.5
EPSS 0.03
CVE-2018-4116
MEDIUM
Safari < 11.1 - Address Bar Spoofing via Crafted Web Site
Apr 03, 2018
CVSS 6.5
EPSS 0.01
CVE-2018-4115
CRITICAL
Apple <11.3, <10.13.4, <4.3 - Auth Bypass
Apr 03, 2018
CVSS 9.8
EPSS 0.02
CVE-2018-4114
HIGH
Safari < 11.1 - Remote Code Execution via WebKit Memory Corruption
Apr 03, 2018
CVSS 8.8
EPSS 0.02
CVE-2018-4113
MEDIUM
Safari < 11.1 - Denial of Service via JavaScriptCore Array Indexing
Apr 03, 2018
CVSS 6.5
EPSS 0.02
CVE-2018-4112
MEDIUM
macOS < 10.13.4 - Information Disclosure via ATS Symlink Mishandling
Apr 03, 2018
CVSS 5.5
EPSS 0.02
CVE-2018-4111
MEDIUM
macOS < 10.13.4 - S/MIME Encrypted Message Content Exposure via HTML Email
Apr 03, 2018
CVSS 5.9
EPSS 0.01
CVE-2018-4110
CRITICAL
iPhone OS < 11.3 - Cookie Persistence Restriction Bypass in Web App
Apr 03, 2018
CVSS 9.8
EPSS 0.04
CVE-2018-4109
HIGH
Apple tvOS < 11.2.5 - Remote Code Execution in Graphics Driver
Apr 03, 2018
CVSS 7.8
EPSS 0.01
CVE-2018-4108
CRITICAL
macOS < 10.13.4 - APFS Volume Password Truncation via Disk Management Injection
Apr 03, 2018
CVSS 9.8
EPSS 0.02
Products
iphone_os 4,053
mac_os_x 3,210
macos 2,755
tvos 2,005
ipados 1,936
watchos 1,779
safari 1,629
macOS 1,352
itunes 922
iOS and iPadOS 800
mac_os_x_server 655
visionOS 456
icloud 449
visionos 434
watchOS 434
tvOS 402
webkit 258
quicktime 246
Safari 211
iPadOS 131
xcode 95
ipad_os 89
cups 56
apple_tv 36
darwin_streaming_server 27
ipod_touch 18
Xcode 16
quicktime_streaming_server 16
airport_base_station_firmware 11
os_x_server 11
Quick Filters