Vulnerabilities > Apple > Medium

DATE CVE VULNERABILITY TITLE RISK
2019-04-03 CVE-2018-4304 Improper Input Validation vulnerability in Apple products
A denial of service issue was addressed with improved validation.
network
apple CWE-20
4.3
2019-04-03 CVE-2018-4303 Improper Input Validation vulnerability in Apple products
An input validation issue was addressed with improved input validation.
network
apple CWE-20
6.8
2019-04-03 CVE-2018-4300 Information Exposure vulnerability in Apple Cups
The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access to the web interface when the web interface is enabled.
network
apple CWE-200
4.3
2019-04-03 CVE-2018-4299 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple products
Multiple memory corruption issues were addressed with improved memory handling.
6.8
2019-04-03 CVE-2018-4293 Improper Input Validation vulnerability in Apple products
A cookie management issue was addressed with improved checks.
network
low complexity
apple microsoft CWE-20
5.0
2019-04-03 CVE-2018-4290 Unspecified vulnerability in Apple Iphone OS and Watchos
A denial of service issue was addressed with improved memory handling.
network
apple
4.3
2019-04-03 CVE-2018-4284 Incorrect Type Conversion or Cast vulnerability in Apple products
A type confusion issue was addressed with improved memory handling.
6.8
2019-04-03 CVE-2018-4283 Out-of-bounds Read vulnerability in Apple mac OS X
An out-of-bounds read issue existed that led to the disclosure of kernel memory.
local
low complexity
apple CWE-125
4.9
2019-04-03 CVE-2018-4282 Out-of-bounds Read vulnerability in Apple Iphone OS, Tvos and Watchos
An out-of-bounds read issue existed that led to the disclosure of kernel memory.
local
low complexity
apple CWE-125
4.9
2019-04-03 CVE-2018-4280 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple products
A memory corruption issue was addressed with improved memory handling.
network
apple CWE-119
6.8