CVE-2018-4219 | ByteOS Network

Vulnerability Details :

CVE-2018-4219

Assigner-apple

Assigner Org ID-286789f9-fbc2-4510-9f9a-43facdede74c

Published At-08 Jun, 2018 | 18:00

Updated At-05 Aug, 2024 | 05:04

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "ATS" component. It allows attackers to gain privileges via a crafted app that leverages type confusion.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:apple

Assigner Org ID:286789f9-fbc2-4510-9f9a-43facdede74c

Published At:08 Jun, 2018 | 18:00

Updated At:05 Aug, 2024 | 05:04

▼CVE Numbering Authority (CNA)

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "ATS" component. It allows attackers to gain privileges via a crafted app that leverages type confusion.

Affected Products

Vendor

Product

Versions

Affected

n/a

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.securitytracker.com/id/1041027	vdb-entry x_refsource_SECTRACK
https://support.apple.com/HT208849	x_refsource_CONFIRM

Hyperlink: http://www.securitytracker.com/id/1041027

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: https://support.apple.com/HT208849

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.securitytracker.com/id/1041027	vdb-entry x_refsource_SECTRACK x_transferred
https://support.apple.com/HT208849	x_refsource_CONFIRM x_transferred

Hyperlink: http://www.securitytracker.com/id/1041027

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: https://support.apple.com/HT208849

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

Source:product-security@apple.com

Published At:08 Jun, 2018 | 18:29

Updated At:13 Jul, 2018 | 18:21

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "ATS" component. It allows attackers to gain privileges via a crafted app that leverages type confusion.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	7.8	HIGH	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.0

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 6.8

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

>>mac_os_x>>Versions before 10.13.5(exclusive)

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-704	Primary	nvd@nist.gov

CWE ID: CWE-704

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securitytracker.com/id/1041027	product-security@apple.com	Third Party Advisory VDB Entry
https://support.apple.com/HT208849	product-security@apple.com	Vendor Advisory

Hyperlink: http://www.securitytracker.com/id/1041027

Source: product-security@apple.com

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://support.apple.com/HT208849

Source: product-security@apple.com

Resource:

Vendor Advisory

Similar CVEs

2524Records found

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-2.76% / 85.69%

||

7 Day CHG~0.00%

Published-05 Mar, 2012 | 19:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 17.0.963.65 does not properly perform casts of unspecified variables during the splitting of anonymous blocks, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.

Vendor-n/a openSUSE Apple Inc.Google LLC

Product-opensuse iphone_os itunes safari chrome n/a

CWE ID-CWE-704

Incorrect Type Conversion or Cast

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-2.76% / 85.69%

||

7 Day CHG~0.00%

Published-05 Mar, 2012 | 19:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 17.0.963.65 does not properly perform a cast of an unspecified variable during handling of line boxes, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.

Vendor-n/a openSUSE Apple Inc.Google LLC

Product-opensuse iphone_os itunes safari chrome n/a

CWE ID-CWE-704

Incorrect Type Conversion or Cast

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-2.97% / 86.19%

||

7 Day CHG~0.00%

Published-04 Oct, 2010 | 20:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3 and Google Chrome before 6.0.472.62, does not properly perform a cast of an unspecified variable, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an SVG element in a non-SVG document.

Vendor-n/a openSUSE Apple Inc.Google LLC

Product-opensuse safari chrome n/a

CWE ID-CWE-704

Incorrect Type Conversion or Cast

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-2.05% / 83.53%

||

7 Day CHG~0.00%

Published-20 Jul, 2018 | 19:00

Updated-05 Aug, 2024 | 05:18

Adobe Flash Player 30.0.0.113 and earlier versions have a Type Confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Vendor-n/a Google LLC Adobe Inc.Red Hat, Inc.Apple Inc.Microsoft Corporation Linux Kernel Organization, Inc

Product-enterprise_linux_server linux_kernel windows_8.1 enterprise_linux_workstation chrome_os mac_os_x windows flash_player_desktop_runtime windows_10 enterprise_linux_desktop flash_player Adobe Flash Player 30.0.0.113 and earlier versions

CWE ID-CWE-704

Incorrect Type Conversion or Cast

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-10.69% / 93.15%

||

7 Day CHG~0.00%

Published-20 Jul, 2018 | 19:00

Updated-05 Aug, 2024 | 05:26

Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Type Confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions

CWE ID-CWE-704

Incorrect Type Conversion or Cast

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.69% / 71.32%

||

7 Day CHG~0.00%

Published-03 Apr, 2019 | 17:43

Updated-05 Aug, 2024 | 05:11

A type confusion issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.

Vendor-n/a Apple Inc.Microsoft Corporation

Product-itunes iphone_os watchos tvos safari windows icloud iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for Windows

CWE ID-CWE-704

Incorrect Type Conversion or Cast

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.02% / 86.31%

||

7 Day CHG~0.00%

Published-09 Jul, 2018 | 19:00

Updated-05 Aug, 2024 | 05:18

Adobe Flash Player versions 29.0.0.171 and earlier have a Type Confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Vendor-n/a Google LLC Adobe Inc.Red Hat, Inc.Apple Inc.Microsoft Corporation Linux Kernel Organization, Inc

Product-enterprise_linux_server linux_kernel windows_8.1 enterprise_linux_workstation chrome_os mac_os_x windows flash_player_desktop_runtime windows_10 enterprise_linux_desktop flash_player Adobe Flash Player 29.0.0.171 and earlier versions

CWE ID-CWE-704

Incorrect Type Conversion or Cast

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.57% / 87.46%

||

7 Day CHG~0.00%

Published-09 Jul, 2018 | 19:00

Updated-05 Aug, 2024 | 05:18

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Type Confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc Adobe Acrobat and Reader 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier versions

CWE ID-CWE-704

Incorrect Type Conversion or Cast

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-5.36% / 89.86%

||

7 Day CHG~0.00%

Published-08 Jun, 2018 | 18:00

Updated-05 Aug, 2024 | 05:11

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code via a crafted web site that leverages type confusion.

Vendor-n/a Canonical Ltd.Apple Inc.Microsoft Corporation

Product-itunes iphone_os ubuntu_linux watchos tvos safari windows icloud n/a

CWE ID-CWE-704

Incorrect Type Conversion or Cast

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-27.10% / 96.25%

||

7 Day CHG~0.00%

Published-20 Jul, 2018 | 19:00

Updated-05 Aug, 2024 | 08:45

Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Type Confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions

CWE ID-CWE-704

Incorrect Type Conversion or Cast

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-7.8||HIGH

EPSS-3.95% / 88.08%

||

7 Day CHG~0.00%

Published-12 Oct, 2018 | 18:00

Updated-05 Aug, 2024 | 08:45

Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-704

Incorrect Type Conversion or Cast

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-7.8||HIGH

EPSS-5.48% / 89.99%

||

7 Day CHG~0.00%

Published-11 Jan, 2017 | 04:40

Updated-20 Apr, 2025 | 01:37

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable type confusion vulnerability in the XSLT engine related to localization functionality. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Adobe Inc.Apple Inc.Microsoft Corporation

Product-acrobat mac_os_x acrobat_dc reader acrobat_reader_dc windows Adobe Acrobat Reader 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier.

CWE ID-CWE-704

Incorrect Type Conversion or Cast

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.17% / 38.32%

||

7 Day CHG~0.00%

Published-20 Feb, 2017 | 08:35

Updated-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. The issue involves the "CoreMedia External Displays" component. It allows local users to gain privileges or cause a denial of service (type confusion) via unspecified vectors.

Vendor-n/a Apple Inc.

Product-iphone_os mac_os_x n/a

CWE ID-CWE-704

Incorrect Type Conversion or Cast

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-1.42% / 80.27%

||

7 Day CHG~0.00%

Published-20 Feb, 2017 | 08:35

Updated-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "Bluetooth" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (type confusion) via a crafted app.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-704

Incorrect Type Conversion or Cast

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.15% / 35.75%

||

7 Day CHG~0.00%

Published-03 Apr, 2019 | 17:43

Updated-05 Aug, 2024 | 05:11

A type confusion issue was addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.

Vendor-n/a Apple Inc.

Product-mac_os_x macOS

CWE ID-CWE-704

Incorrect Type Conversion or Cast

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-7.8||HIGH

EPSS-4.65% / 89.05%

||

7 Day CHG~0.00%

Published-12 Oct, 2018 | 18:00

Updated-05 Aug, 2024 | 08:45

Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-704

Incorrect Type Conversion or Cast

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-7.8||HIGH

EPSS-4.65% / 89.05%

||

7 Day CHG~0.00%

Published-12 Oct, 2018 | 18:00

Updated-05 Aug, 2024 | 08:45

Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-704

Incorrect Type Conversion or Cast

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.36% / 57.75%

||

7 Day CHG~0.00%

Published-02 Apr, 2021 | 18:20

Updated-03 Aug, 2024 | 16:18

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os ipad_os macos mac_os_x macOS iOS and iPadOS

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.84% / 74.21%

||

7 Day CHG~0.00%

Published-10 Apr, 2015 | 14:00

Updated-12 Apr, 2025 | 10:46

WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-04-08-1, APPLE-SA-2015-04-08-3, and APPLE-SA-2015-04-08-4.

Vendor-n/a Apple Inc.

Product-safari iphone_os itunes tvos n/a

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-2.01% / 83.37%

||

7 Day CHG~0.00%

Published-10 Apr, 2015 | 14:00

Updated-12 Apr, 2025 | 10:46

WebKit, as used in Apple iOS before 8.3 and Apple TV before 7.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-04-08-3 and APPLE-SA-2015-04-08-4.

Vendor-n/a Apple Inc.

Product-iphone_os tvos n/a

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.79% / 73.39%

||

7 Day CHG~0.00%

Published-18 Mar, 2015 | 22:00

Updated-12 Apr, 2025 | 10:46

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.

Vendor-n/a Apple Inc.

Product-safari iphone_os itunes tvos n/a

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.27% / 49.77%

||

7 Day CHG~0.00%

Published-02 Apr, 2021 | 17:47

Updated-03 Aug, 2024 | 16:18

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os macos mac_os_x ipados macOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.91% / 75.46%

||

7 Day CHG~0.00%

Published-10 Apr, 2015 | 14:00

Updated-12 Apr, 2025 | 10:46

WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-04-08-1, APPLE-SA-2015-04-08-3, and APPLE-SA-2015-04-08-4.

Vendor-n/a Apple Inc.

Product-safari iphone_os itunes tvos n/a

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.42% / 61.36%

||

7 Day CHG~0.00%

Published-02 Apr, 2021 | 18:00

Updated-03 Aug, 2024 | 16:25

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos mac_os_x macos macOS iOS and iPadOS

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-6.8||MEDIUM

EPSS-3.16% / 86.61%

||

7 Day CHG~0.00%

Published-01 Apr, 2015 | 21:00

Updated-12 Apr, 2025 | 10:46

Race condition in gpu/command_buffer/service/gles2_cmd_decoder.cc in Google Chrome before 41.0.2272.118 allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact by manipulating OpenGL ES commands.

Vendor-n/a Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-windows linux_kernel macos chrome n/a

CWE ID-CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.42% / 61.36%

||

7 Day CHG~0.00%

Published-02 Apr, 2021 | 17:59

Updated-03 Aug, 2024 | 16:25

An access issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos mac_os_x macos macOS iOS and iPadOS

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.28% / 50.66%

||

7 Day CHG~0.00%

Published-02 Apr, 2021 | 17:55

Updated-03 Aug, 2024 | 16:25

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os macos mac_os_x ipados macOS iOS and iPadOS

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.57% / 67.98%

||

7 Day CHG~0.00%

Published-02 Apr, 2021 | 17:48

Updated-03 Aug, 2024 | 16:18

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos mac_os_x macos macOS iOS and iPadOS

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.91% / 75.46%

||

7 Day CHG~0.00%

Published-10 Apr, 2015 | 14:00

Updated-12 Apr, 2025 | 10:46

WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-04-08-1, APPLE-SA-2015-04-08-3, and APPLE-SA-2015-04-08-4.

Vendor-n/a Apple Inc.

Product-safari iphone_os itunes tvos n/a

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.50% / 65.49%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 14:47

Updated-03 Aug, 2024 | 16:25

An out-of-bounds read was addressed with improved input validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing a maliciously crafted font file may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos mac_os_x macos tvOS macOS watchOS iOS and iPadOS

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.78% / 73.33%

||

7 Day CHG~0.00%

Published-02 Apr, 2021 | 17:49

Updated-03 Aug, 2024 | 16:18

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing maliciously crafted web content may lead to code execution.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos mac_os_x macos macOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Cisco Systems, Inc.

Matching Score-8

Assigner-Cisco Systems, Inc.

CVSS Score-7.1||HIGH

EPSS-0.12% / 31.74%

||

7 Day CHG~0.00%

Published-20 Jan, 2021 | 19:57

Updated-23 Jul, 2025 | 15:26

Cisco DNA Center Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco DNA Center Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to manipulate an authenticated user into executing malicious actions without their awareness or consent. The vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a web-based management user to follow a specially crafted link. A successful exploit could allow the attacker to perform arbitrary actions on the device with the privileges of the authenticated user. These actions include modifying the device configuration, disconnecting the user's session, and executing Command Runner commands.

Vendor-Cisco Systems, Inc.Microsoft Corporation Apple Inc.Linux Kernel Organization, Inc McAfee, LLC

Product-linux_kernel windows agent macos catalyst_center Cisco Digital Network Architecture Center (DNA Center)

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.46% / 63.65%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 14:48

Updated-03 Aug, 2024 | 16:25

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos tvos ipados macos tvOS macOS watchOS iOS and iPadOS

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.40% / 80.11%

||

7 Day CHG~0.00%

Published-02 Apr, 2021 | 18:07

Updated-03 Aug, 2024 | 16:25

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 14.4.1 and iPadOS 14.4.1, Safari 14.0.3 (v. 14610.4.3.1.7 and 15610.4.3.1.7), watchOS 7.3.2, macOS Big Sur 11.2.3. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Debian GNU/Linux Fedora Project Apple Inc.

Product-iphone_os debian_linux ipados tvos watchos safari fedora macos macOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.36% / 57.93%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 14:46

Updated-03 Aug, 2024 | 16:25

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, watchOS 7.4. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-macos watchos watchOS macOS

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-2.49% / 84.99%

||

7 Day CHG~0.00%

Published-10 Apr, 2015 | 14:00

Updated-12 Apr, 2025 | 10:46

FontParser in Apple iOS before 8.3 and Apple OS X before 10.10.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.

Vendor-n/a Apple Inc.

Product-iphone_os mac_os_x n/a

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.34% / 56.02%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 14:44

Updated-03 Aug, 2024 | 16:25

This issue was addressed with improved checks. This issue is fixed in iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os ipados iOS and iPadOS

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.55% / 67.36%

||

7 Day CHG~0.00%

Published-02 Apr, 2021 | 18:02

Updated-03 Aug, 2024 | 16:25

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os ipad_os watchos tvos mac_os_x macos macOS iOS and iPadOS

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.87% / 74.80%

||

7 Day CHG~0.00%

Published-18 Mar, 2015 | 22:00

Updated-12 Apr, 2025 | 10:46

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.

Vendor-n/a Apple Inc.

Product-itunes safari iphone_os mac_os_x tvos n/a

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.24% / 47.33%

||

7 Day CHG~0.00%

Published-02 Apr, 2021 | 18:01

Updated-23 Oct, 2025 | 18:01

Known KEV||Action Due Date - 2022-05-25||Apply updates per vendor instructions.

A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-webkitgtk Fedora Project Apple Inc.

Product-mac_os_x tvos macos watchos ipados fedora webkitgtk iphone_os iOS and iPadOS macOS Multiple Products

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.78% / 73.26%

||

7 Day CHG~0.00%

Published-10 Apr, 2015 | 14:00

Updated-12 Apr, 2025 | 10:46

WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-04-08-1, APPLE-SA-2015-04-08-3, and APPLE-SA-2015-04-08-4.

Vendor-n/a Apple Inc.

Product-safari iphone_os itunes tvos n/a

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.31% / 53.37%

||

7 Day CHG~0.00%

Published-02 Apr, 2021 | 18:02

Updated-03 Aug, 2024 | 16:25

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted font may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-macos mac_os_x macOS

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.81% / 73.84%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 14:49

Updated-03 Aug, 2024 | 16:25

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-macos mac_os_x macOS

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.42% / 61.30%

||

7 Day CHG~0.00%

Published-02 Apr, 2021 | 17:46

Updated-03 Aug, 2024 | 16:18

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-macos mac_os_x macOS

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.40% / 59.81%

||

7 Day CHG~0.00%

Published-02 Apr, 2021 | 17:47

Updated-03 Aug, 2024 | 16:18

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos mac_os_x macos macOS iOS and iPadOS

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.41% / 60.58%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 14:44

Updated-03 Aug, 2024 | 16:25

A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.

Vendor-Apple Inc.

Product-macos mac_os_x macOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.34% / 56.51%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 14:43

Updated-03 Aug, 2024 | 16:25

This issue was addressed with improved checks. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos mac_os_x macos tvOS macOS watchOS iOS and iPadOS

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.40% / 59.81%

||

7 Day CHG~0.00%

Published-02 Apr, 2021 | 17:48

Updated-03 Aug, 2024 | 16:18

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos mac_os_x macos macOS iOS and iPadOS

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.40% / 60.26%

||

7 Day CHG~0.00%

Published-02 Apr, 2021 | 17:58

Updated-03 Aug, 2024 | 16:25

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos mac_os_x macos macOS iOS and iPadOS

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.84% / 74.33%

||

7 Day CHG~0.00%

Published-18 Mar, 2015 | 22:00

Updated-12 Apr, 2025 | 10:46

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.

Vendor-n/a Apple Inc.

Product-safari iphone_os itunes tvos n/a