Vulnerabilities > Apple > Medium

DATE CVE VULNERABILITY TITLE RISK
2019-04-03 CVE-2018-4304 Improper Input Validation vulnerability in Apple products
A denial of service issue was addressed with improved validation.
local
low complexity
apple CWE-20
5.0
2019-04-03 CVE-2018-4300 Information Exposure vulnerability in Apple Cups
The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access to the web interface when the web interface is enabled.
network
high complexity
apple CWE-200
5.9
2019-04-03 CVE-2018-4293 Improper Input Validation vulnerability in Apple products
A cookie management issue was addressed with improved checks.
network
low complexity
apple CWE-20
5.3
2019-04-03 CVE-2018-4290 Unspecified vulnerability in Apple Iphone OS
A denial of service issue was addressed with improved memory handling.
network
high complexity
apple
5.9
2019-04-03 CVE-2018-4289 Information Exposure vulnerability in Apple mac OS X
An information disclosure issue was addressed by removing the vulnerable code.
local
low complexity
apple CWE-200
5.5
2019-04-03 CVE-2018-4283 Out-of-bounds Read vulnerability in Apple mac OS X
An out-of-bounds read issue existed that led to the disclosure of kernel memory.
local
low complexity
apple CWE-125
5.5
2019-04-03 CVE-2018-4282 Out-of-bounds Read vulnerability in Apple Iphone OS
An out-of-bounds read issue existed that led to the disclosure of kernel memory.
local
low complexity
apple CWE-125
5.5
2019-04-03 CVE-2018-4279 Improper Input Validation vulnerability in Apple Safari
An inconsistent user interface issue was addressed with improved state management.
network
low complexity
apple CWE-20
5.3
2019-04-03 CVE-2018-4273 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple products
Multiple memory corruption issues were addressed with improved input validation.
network
low complexity
apple CWE-119
6.5
2019-04-03 CVE-2018-4271 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple products
Multiple memory corruption issues were addressed with improved input validation.
network
low complexity
apple CWE-119
6.5