Apple Tv vulnerabilities

CVE-2018-4089 [HIGH] CWE-119 CVE-2018-4089: An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13 An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. Safari before 11.0.3 is affected. tvOS before 11.2.5 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a

CVE-2017-2362 [HIGH] CWE-119 CVE-2017-2362: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0 An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

CVE-2014-4492 [HIGH] CVE-2014-4492: Apple TV 7.0.3 Apple Security Update: About the security content of Apple TV 7.0.3 Product: Apple TV Version: 7.0.3 CVE: CVE-2014-4492 Component: CVE-ID

CVE-2018-4243 [HIGH] CWE-119 CVE-2018-4243: An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Kernel" component. A buffer overflow in getvolattrlist allows attackers to execute arbitrary code in a privileged context via a crafted app.

CVE-2018-4241 [HIGH] CWE-119 CVE-2018-4241: An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Kernel" component. A buffer overflow in mptcp_usr_connectx allows attackers to execute arbitrary code in a privileged context via a crafted app.

CVE-2018-4206 [HIGH] CWE-119 CVE-2018-4206: An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. macOS before 10.13 An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. macOS before 10.13.4 Security Update 2018-001 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Crash Reporter" component. It allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via

CVE-2018-4087 [HIGH] CWE-119 CVE-2018-4087: An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. tvOS before 11.2.5 An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Core Bluetooth" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

CVE-2015-3798 [HIGH] CVE-2015-3798: Apple TV 7.2.1 Apple Security Update: About the security content of Apple TV 7.2.1 Product: Apple TV Version: 7.2.1 CVE: CVE-2015-3798 Component: CVE-ID

CVE-2015-3796 [HIGH] CVE-2015-3796: Apple TV 7.2.1 Apple Security Update: About the security content of Apple TV 7.2.1 Product: Apple TV Version: 7.2.1 CVE: CVE-2015-3796 Component: CVE-ID

CVE-2014-0191 [MEDIUM] CVE-2014-0191: Apple TV 7.2.1 Apple Security Update: About the security content of Apple TV 7.2.1 Product: Apple TV Version: 7.2.1 CVE: CVE-2014-0191 Component: CVE-ID Impact: A malicious application may be able to execute arbitrary code with system privileges Description: A memory corruption issue existed in handling of malformed XPC messages. This issue was improved through improved bounds checking.

CVE-2018-4090 [MEDIUM] CWE-200 CVE-2018-4090: An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13 An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.

CVE-2014-4488 [CRITICAL] CVE-2014-4488: Apple TV 7.0.3 Apple Security Update: About the security content of Apple TV 7.0.3 Product: Apple TV Version: 7.0.3 CVE: CVE-2014-4488 Component: CVE-ID

CVE-2018-4088 [HIGH] CWE-119 CVE-2018-4088: An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13 An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. Safari before 11.0.3 is affected. iCloud before 7.3 on Windows is affected. iTunes before 12.7.3 on Windows is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "WebKit" component. It allows

CVE-2018-4096 [HIGH] CWE-119 CVE-2018-4096: An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13 An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. Safari before 11.0.3 is affected. iCloud before 7.3 on Windows is affected. iTunes before 12.7.3 on Windows is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "WebKit" component. It allows

CVE-2014-5352 [CRITICAL] CVE-2014-5352: Apple TV 7.0.3 Apple Security Update: About the security content of Apple TV 7.0.3 Product: Apple TV Version: 7.0.3 CVE: CVE-2014-5352 Component: CVE-2014-5352

CVE-2014-4487 [CRITICAL] CVE-2014-4487: Apple TV 7.0.3 Apple Security Update: About the security content of Apple TV 7.0.3 Product: Apple TV Version: 7.0.3 CVE: CVE-2014-4487 Component: CVE-ID

CVE-2015-1061 [CRITICAL] CVE-2015-1061: Apple TV 7.1 Apple Security Update: About the security content of Apple TV 7.1 Product: Apple TV Version: 7.1 CVE: CVE-2015-1061 Component: CVE-ID

CVE-2015-3768 [CRITICAL] CVE-2015-3768: Apple TV 7.2.1 Apple Security Update: About the security content of Apple TV 7.2.1 Product: Apple TV Version: 7.2.1 CVE: CVE-2015-3768 Component: CVE-ID

CVE-2018-4085 [HIGH] CWE-119 CVE-2018-4085: An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13 An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "QuartzCore" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) vi

CVE-2018-4298 [CRITICAL] CVE-2018-4298: In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 E In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, a permissions issue existed in Remote Management. This issue was addressed through improved permission validation.