| Max CVSS | 7.8 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2018-4110 | 7.5 |
An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Web App" component. It allows remote attackers to bypass intended restrictions on cookie persistence.
|
03-10-2019 - 00:03 | 03-04-2018 - 06:29 | |
| CVE-2018-4172 | 2.1 |
An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Find My iPhone" component. It allows physically proximate attackers to bypass the iCloud password requirement for disabling the "Find My iPhone" f
|
03-10-2019 - 00:03 | 03-04-2018 - 06:29 | |
| CVE-2018-4149 | 6.8 |
An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "SafariViewController" component. It allows remote attackers to spoof the user interface via a crafted web site that leverages input into a partial
|
04-05-2018 - 14:44 | 03-04-2018 - 06:29 | |
| CVE-2018-4168 | 2.1 |
An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Files Widget" component. It allows physically proximate attackers to obtain sensitive information by leveraging the display of cached data on a lo
|
04-05-2018 - 14:37 | 03-04-2018 - 06:29 | |
| CVE-2018-4148 | 7.5 |
An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Telephony" component. A buffer overflow allows remote attackers to execute arbitrary code.
|
04-05-2018 - 13:46 | 03-04-2018 - 06:29 | |
| CVE-2018-4134 | 6.8 |
An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the user interface via a crafted web site.
|
04-05-2018 - 13:16 | 03-04-2018 - 06:29 | |
| CVE-2018-4123 | 2.1 |
An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves alarm and timer handling in the "Clock" component. It allows physically proximate attackers to discover the iTunes e-mail address.
|
04-05-2018 - 13:08 | 03-04-2018 - 06:29 | |
| CVE-2018-4140 | 7.8 |
An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Telephony" component. It allows remote attackers to cause a denial of service (NULL pointer dereference and reboot) via a Class 0 SMS message.
|
03-05-2018 - 19:20 | 03-04-2018 - 06:29 |