4.2.10

DATE	CVE	VULNERABILITY TITLE	RISK
2019-01-11	CVE-2018-4330	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple Iphone OS In iOS before 11.4, a memory corruption issue exists and was addressed with improved memory handling. network apple CWE-119 critical	9.3
2019-01-11	CVE-2018-4298	Unspecified vulnerability in Apple products In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, a permissions issue existed in Remote Management. network low complexity apple critical	9.8
2019-01-11	CVE-2018-4278	In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, sound fetched through audio elements may be exfiltrated cross-origin. network low complexity apple canonical	4.3
2019-01-11	CVE-2018-4277	Improper Input Validation vulnerability in Apple products In iOS before 11.4.1, watchOS before 4.3.2, tvOS before 11.4.1, Safari before 11.1.1, macOS High Sierra before 10.13.6, a spoofing issue existed in the handling of URLs. network low complexity apple CWE-20	5.0
2019-01-11	CVE-2018-4262	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, multiple memory corruption issues were addressed with improved memory handling. network low complexity apple canonical CWE-119	8.8
2019-01-11	CVE-2018-4213	Improper Input Validation vulnerability in multiple products In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. network low complexity apple canonical webkitgtk CWE-20	8.8
2019-01-11	CVE-2018-4212	In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. network low complexity apple canonical webkitgtk	8.8
2019-01-11	CVE-2018-4210	Improper Validation of Array Index vulnerability in multiple products In iOS before 11.3, Safari before 11.1, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, an array indexing issue existed in the handling of a function in javascript core. network low complexity apple canonical webkitgtk CWE-129	8.8
2019-01-11	CVE-2018-4209	Improper Input Validation vulnerability in multiple products In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. network low complexity apple canonical webkit CWE-20	8.8
2019-01-11	CVE-2018-4208	Improper Input Validation vulnerability in multiple products In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. network low complexity apple canonical webkitgtk CWE-20	8.8