Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
205 vulnerabilities found for N/A by Apple
CERTFR-2021-AVI-173
Vulnerability from certfr_avis - Published: - Updated:
Une vulnérabilité a été découverte dans les produits Apple. Elle permet à un attaquant de provoquer une exécution de code arbitraire.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Safari versions ant\u00e9rieures \u00e0 14.0.3 avec le dernier correctif",
"product": {
"name": "Safari",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iPadOS versions ant\u00e9rieures \u00e0 14.4.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "watchOS versions ant\u00e9rieures \u00e0 7.3.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS versions ant\u00e9rieures \u00e0 14.4.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Big Sur versions ant\u00e9rieures \u00e0 11.2.3",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2021-1844",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1844"
}
],
"links": [],
"reference": "CERTFR-2021-AVI-173",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2021-03-09T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans les produits Apple. Elle permet\n\u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire.\n",
"title": "Vuln\u00e9rabilit\u00e9 dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212220 du 08 mars 2021",
"url": "https://support.apple.com/fr-fr/HT212220"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212222 du 08 mars 2021",
"url": "https://support.apple.com/fr-fr/HT212222"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212223 du 08 mars 2021",
"url": "https://support.apple.com/fr-fr/HT212223"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212221 du 08 mars 2021",
"url": "https://support.apple.com/fr-fr/HT212221"
}
]
}
CERTFR-2021-AVI-062
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Elles permettent à un attaquant de provoquer une exécution de code arbitraire, un déni de service et une élévation de privilèges.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Apple | N/A | iOS versions antérieures à 14.4 | ||
| Apple | N/A | watchOS versions antérieures à 7.3 | ||
| Apple | N/A | iPadOS versions antérieures à 14.4 | ||
| Apple | N/A | Xcode versions antérieures à 12.4 | ||
| Apple | N/A | iCloud pour Windows versions antérieures à 12.0 | ||
| Apple | N/A | tvOS versions antérieures à 14.4 |
References
| Title | Publication Time | Tags | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "iOS versions ant\u00e9rieures \u00e0 14.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "watchOS versions ant\u00e9rieures \u00e0 7.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iPadOS versions ant\u00e9rieures \u00e0 14.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Xcode versions ant\u00e9rieures \u00e0 12.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iCloud pour Windows versions ant\u00e9rieures \u00e0 12.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "tvOS versions ant\u00e9rieures \u00e0 14.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2021-1782",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1782"
},
{
"name": "CVE-2020-29619",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-29619"
},
{
"name": "CVE-2020-29611",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-29611"
},
{
"name": "CVE-2020-29618",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-29618"
},
{
"name": "CVE-2021-1781",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1781"
},
{
"name": "CVE-2021-1780",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1780"
},
{
"name": "CVE-2020-29617",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-29617"
},
{
"name": "CVE-2021-1800",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1800"
}
],
"links": [],
"reference": "CERTFR-2021-AVI-062",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2021-01-27T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nElles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code\narbitraire, un d\u00e9ni de service et une \u00e9l\u00e9vation de privil\u00e8ges.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212153 du 26 janvier 2021",
"url": "https://support.apple.com/fr-fr/HT212153"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212145 du 26 janvier 2021",
"url": "https://support.apple.com/fr-fr/HT212145"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212149 du 26 janvier 2021",
"url": "https://support.apple.com/fr-fr/HT212149"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212146 du 26 janvier 2021",
"url": "https://support.apple.com/fr-fr/HT212146"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212148 du 26 janvier 2021",
"url": "https://support.apple.com/fr-fr/HT212148"
}
]
}
CERTFR-2020-AVI-821
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, un contournement de la politique de sécurité et une atteinte à l'intégrité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Apple | N/A | watchOS versions 7.x antérieures à 7.2 | ||
| Apple | N/A | iPadOS versions 14.x antérieures à 14.3 | ||
| Apple | N/A | iOS versions 12.x antérieures à 12.5 | ||
| Apple | Safari | Safari versions 14.x antérieures à 14.0.2 | ||
| Apple | macOS | macOS Server versions 5.x antérieures à 5.11 | ||
| Apple | N/A | iOS versions 14.x antérieures à 14.3 | ||
| Apple | N/A | watchOS versions 6.x antérieures à 6.3 | ||
| Apple | N/A | tvOS versions 14.x antérieures à 14.3 |
References
| Title | Publication Time | Tags | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "watchOS versions 7.x ant\u00e9rieures \u00e0 7.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iPadOS versions 14.x ant\u00e9rieures \u00e0 14.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS versions 12.x ant\u00e9rieures \u00e0 12.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Safari versions 14.x ant\u00e9rieures \u00e0 14.0.2",
"product": {
"name": "Safari",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Server versions 5.x ant\u00e9rieures \u00e0 5.11",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS versions 14.x ant\u00e9rieures \u00e0 14.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "watchOS versions 6.x ant\u00e9rieures \u00e0 6.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "tvOS versions 14.x ant\u00e9rieures \u00e0 14.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2020-29613",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-29613"
},
{
"name": "CVE-2020-27951",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27951"
},
{
"name": "CVE-2020-27944",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27944"
},
{
"name": "CVE-2020-29619",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-29619"
},
{
"name": "CVE-2020-27943",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27943"
},
{
"name": "CVE-2020-29611",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-29611"
},
{
"name": "CVE-2020-29618",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-29618"
},
{
"name": "CVE-2020-15969",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15969"
},
{
"name": "CVE-2020-9995",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9995"
},
{
"name": "CVE-2020-29617",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-29617"
},
{
"name": "CVE-2020-27948",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27948"
},
{
"name": "CVE-2020-27946",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27946"
}
],
"links": [],
"reference": "CERTFR-2020-AVI-821",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2020-12-15T00:00:00.000000"
}
],
"risks": [
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire, un contournement de la politique de\ns\u00e9curit\u00e9 et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212006 du 15 d\u00e9cembre 2020",
"url": "https://support.apple.com/fr-fr/HT212006"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212004 du 15 d\u00e9cembre 2020",
"url": "https://support.apple.com/fr-fr/HT212004"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212003 du 15 d\u00e9cembre 2020",
"url": "https://support.apple.com/fr-fr/HT212003"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212007 du 15 d\u00e9cembre 2020",
"url": "https://support.apple.com/fr-fr/HT212007"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT211932 du 15 d\u00e9cembre 2020",
"url": "https://support.apple.com/fr-fr/HT211932"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212009 du 15 d\u00e9cembre 2020",
"url": "https://support.apple.com/fr-fr/HT212009"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212005 du 15 d\u00e9cembre 2020",
"url": "https://support.apple.com/fr-fr/HT212005"
}
]
}
CERTFR-2020-AVI-789
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Apple iCloud pour Windows. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, un déni de service à distance et une atteinte à l'intégrité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "iCloud pour Windows 10 versions ant\u00e9rieures \u00e0 11.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2020-13434",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-13434"
},
{
"name": "CVE-2020-27918",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27918"
},
{
"name": "CVE-2020-27912",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27912"
},
{
"name": "CVE-2020-9983",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9983"
},
{
"name": "CVE-2020-9951",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9951"
},
{
"name": "CVE-2020-27911",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27911"
},
{
"name": "CVE-2020-13630",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-13630"
},
{
"name": "CVE-2020-9849",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9849"
},
{
"name": "CVE-2020-10002",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-10002"
},
{
"name": "CVE-2020-9876",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9876"
},
{
"name": "CVE-2020-9981",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9981"
},
{
"name": "CVE-2020-27917",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27917"
},
{
"name": "CVE-2020-13631",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-13631"
},
{
"name": "CVE-2020-9961",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9961"
},
{
"name": "CVE-2020-13435",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-13435"
},
{
"name": "CVE-2020-9947",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9947"
}
],
"links": [],
"reference": "CERTFR-2020-AVI-789",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2020-12-03T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Apple iCloud pour\nWindows. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer\nune ex\u00e9cution de code arbitraire, un d\u00e9ni de service \u00e0 distance et une\natteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Apple iCloud pour Windows",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT211935 du 3 d\u00e9cembre 2020",
"url": "https://support.apple.com/fr-fr/HT211935"
}
]
}
CERTFR-2020-AVI-717
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, un contournement de la politique de sécurité et une atteinte à la confidentialité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Apple | N/A | Apple iPadOS versions 14.x antérieures à 14.2 | ||
| Apple | macOS | Apple macOS Catalina versions antérieures à 10.15.7 | ||
| Apple | N/A | Apple tvOS versions 14.x antérieures à 14.2 | ||
| Apple | N/A | Apple watchOS versions 7.x antérieures à 7.1 | ||
| Apple | N/A | Apple watchOS versions 5.x antérieures à 5.3.9 | ||
| Apple | N/A | Apple watchOS versions 6.x antérieures à 6.2.9 | ||
| Apple | N/A | Apple iOS versions 14.x antérieures à 14.2 | ||
| Apple | N/A | Apple iOS versions 12.x antérieures à 12.4.9 |
References
| Title | Publication Time | Tags | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Apple iPadOS versions 14.x ant\u00e9rieures \u00e0 14.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple macOS Catalina versions ant\u00e9rieures \u00e0 10.15.7",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple tvOS versions 14.x ant\u00e9rieures \u00e0 14.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple watchOS versions 7.x ant\u00e9rieures \u00e0 7.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple watchOS versions 5.x ant\u00e9rieures \u00e0 5.3.9",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple watchOS versions 6.x ant\u00e9rieures \u00e0 6.2.9",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple iOS versions 14.x ant\u00e9rieures \u00e0 14.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple iOS versions 12.x ant\u00e9rieures \u00e0 12.4.9",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2020-10011",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-10011"
},
{
"name": "CVE-2020-27918",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27918"
},
{
"name": "CVE-2020-27912",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27912"
},
{
"name": "CVE-2020-10016",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-10016"
},
{
"name": "CVE-2020-9974",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9974"
},
{
"name": "CVE-2020-27909",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27909"
},
{
"name": "CVE-2020-10003",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-10003"
},
{
"name": "CVE-2020-27950",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27950"
},
{
"name": "CVE-2020-27911",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27911"
},
{
"name": "CVE-2020-27925",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27925"
},
{
"name": "CVE-2020-27932",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27932"
},
{
"name": "CVE-2020-10002",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-10002"
},
{
"name": "CVE-2020-27930",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27930"
},
{
"name": "CVE-2020-27926",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27926"
},
{
"name": "CVE-2020-10004",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-10004"
},
{
"name": "CVE-2020-13524",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-13524"
},
{
"name": "CVE-2020-27902",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27902"
},
{
"name": "CVE-2020-27917",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27917"
},
{
"name": "CVE-2020-27929",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27929"
},
{
"name": "CVE-2020-27905",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27905"
},
{
"name": "CVE-2020-27916",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27916"
},
{
"name": "CVE-2020-10017",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-10017"
},
{
"name": "CVE-2020-27910",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27910"
},
{
"name": "CVE-2020-10010",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-10010"
},
{
"name": "CVE-2020-27927",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27927"
}
],
"links": [],
"reference": "CERTFR-2020-AVI-717",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2020-11-06T00:00:00.000000"
},
{
"description": "Correction coquille.",
"revision_date": "2023-12-20T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire, un contournement de la politique de\ns\u00e9curit\u00e9 et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT211945 du 05 novembre 2020",
"url": "https://support.apple.com/fr-fr/HT211945"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT211930 du 05 novembre 2020",
"url": "https://support.apple.com/fr-fr/HT211930"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT211947 du 05 novembre 2020",
"url": "https://support.apple.com/fr-fr/HT211947"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT211944 du 05 novembre 2020",
"url": "https://support.apple.com/fr-fr/HT211944"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT211929 du 05 novembre 2020",
"url": "https://support.apple.com/fr-fr/HT211929"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT211940 du 05 novembre 2020",
"url": "https://support.apple.com/fr-fr/HT211940"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT211928 du 05 novembre 2020",
"url": "https://support.apple.com/fr-fr/HT211928"
}
]
}
CERTFR-2020-AVI-452
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Apple | N/A | iOS versions antérieures à 13.6 | ||
| Apple | macOS | macOS Catalina versions antérieures à 10.15.6 | ||
| Apple | macOS | macOS High Sierra sans le correctif de sécurité 2020-004 | ||
| Apple | N/A | iPadOS versions antérieures à 13.6 | ||
| Apple | macOS | macOS Mojave sans le correctif de sécurité 2020-004 | ||
| Apple | N/A | tvOS versions antérieures à 13.4.8 | ||
| Apple | Safari | Safari versions antérieures à 13.1.2 | ||
| Apple | N/A | watchOS versions antérieures à 6.2.8 |
References
| Title | Publication Time | Tags | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "iOS versions ant\u00e9rieures \u00e0 13.6",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Catalina versions ant\u00e9rieures \u00e0 10.15.6",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS High Sierra sans le correctif de s\u00e9curit\u00e9 2020-004",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iPadOS versions ant\u00e9rieures \u00e0 13.6",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Mojave sans le correctif de s\u00e9curit\u00e9 2020-004",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "tvOS versions ant\u00e9rieures \u00e0 13.4.8",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Safari versions ant\u00e9rieures \u00e0 13.1.2",
"product": {
"name": "Safari",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "watchOS versions ant\u00e9rieures \u00e0 6.2.8",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2020-9885",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9885"
},
{
"name": "CVE-2020-9878",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9878"
},
{
"name": "CVE-2019-19906",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19906"
},
{
"name": "CVE-2020-9933",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9933"
},
{
"name": "CVE-2020-9870",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9870"
},
{
"name": "CVE-2020-9890",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9890"
},
{
"name": "CVE-2020-9934",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9934"
},
{
"name": "CVE-2020-9910",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9910"
},
{
"name": "CVE-2019-20807",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-20807"
},
{
"name": "CVE-2020-9936",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9936"
},
{
"name": "CVE-2020-9911",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9911"
},
{
"name": "CVE-2020-9865",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9865"
},
{
"name": "CVE-2020-9799",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9799"
},
{
"name": "CVE-2020-9894",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9894"
},
{
"name": "CVE-2020-9895",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9895"
},
{
"name": "CVE-2020-9914",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9914"
},
{
"name": "CVE-2020-9931",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9931"
},
{
"name": "CVE-2020-9866",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9866"
},
{
"name": "CVE-2020-9916",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9916"
},
{
"name": "CVE-2020-9923",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9923"
},
{
"name": "CVE-2019-14899",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-14899"
},
{
"name": "CVE-2020-9912",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9912"
},
{
"name": "CVE-2020-9893",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9893"
},
{
"name": "CVE-2020-9922",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9922"
},
{
"name": "CVE-2020-9862",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9862"
},
{
"name": "CVE-2020-9864",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9864"
},
{
"name": "CVE-2020-9925",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9925"
},
{
"name": "CVE-2020-9913",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9913"
},
{
"name": "CVE-2020-9888",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9888"
},
{
"name": "CVE-2020-9907",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9907"
},
{
"name": "CVE-2020-9917",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9917"
},
{
"name": "CVE-2020-9889",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9889"
},
{
"name": "CVE-2020-9909",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9909"
},
{
"name": "CVE-2020-9891",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9891"
},
{
"name": "CVE-2020-9903",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9903"
},
{
"name": "CVE-2020-9918",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9918"
},
{
"name": "CVE-2020-9884",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9884"
},
{
"name": "CVE-2020-9915",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9915"
}
],
"links": [],
"reference": "CERTFR-2020-AVI-452",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2020-07-20T00:00:00.000000"
},
{
"description": "Ajout de l\u0027identifiant CVE-2020-9922.",
"revision_date": "2021-04-06T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance\net un contournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT211289 du 15 juillet 2020",
"url": "https://support.apple.com/en-us/HT211289"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT211288 du 15 juillet 2020",
"url": "https://support.apple.com/en-us/HT211288"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT211292 du 15 juillet 2020",
"url": "https://support.apple.com/en-us/HT211292"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT211291 du 15 juillet 2020",
"url": "https://support.apple.com/en-us/HT211291"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT211290 du 15 juillet 2020",
"url": "https://support.apple.com/en-us/HT211290"
}
]
}
CERTFR-2020-AVI-332
Vulnerability from certfr_avis - Published: - Updated:
Une vulnérabilité a été découverte dans les produits Apple. Elle permet à un attaquant de provoquer une exécution de code arbitraire et une élévation de privilèges.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Apple | macOS | macOS High Sierra 10.13.6 sans le dernier correctif de sécurité | ||
| Apple | N/A | iOS versions antérieures à 13.5.1 | ||
| Apple | N/A | watchOS versions antérieures à 6.2.6 | ||
| Apple | macOS | macOS Catalina 10.15.5 sans le dernier correctif de sécurité | ||
| Apple | N/A | iPadOS versions antérieures à 13.5.1 | ||
| Apple | N/A | tvOS versions antérieures à 13.4.6 |
References
| Title | Publication Time | Tags | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "macOS High Sierra 10.13.6 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS versions ant\u00e9rieures \u00e0 13.5.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "watchOS versions ant\u00e9rieures \u00e0 6.2.6",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Catalina 10.15.5 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iPadOS versions ant\u00e9rieures \u00e0 13.5.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "tvOS versions ant\u00e9rieures \u00e0 13.4.6",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2020-9859",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9859"
}
],
"links": [],
"reference": "CERTFR-2020-AVI-332",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2020-06-02T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans les produits Apple. Elle permet\n\u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire et une\n\u00e9l\u00e9vation de privil\u00e8ges.\n",
"title": "Vuln\u00e9rabilit\u00e9 dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT211214 du 01 juin 2020",
"url": "https://support.apple.com/fr-fr/HT211214"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT211215 du 01 juin 2020",
"url": "https://support.apple.com/fr-fr/HT211215"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT211217 du 01 juin 2020",
"url": "https://support.apple.com/fr-fr/HT211217"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT211216 du 01 juin 2020",
"url": "https://support.apple.com/fr-fr/HT211216"
}
]
}
CERTFR-2020-AVI-321
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Apple | macOS | macOS Catalina versions antérieures à 10.15.5 | ||
| Apple | N/A | iCloud pour Windows versions 11.x antérieures à 11.2 | ||
| Apple | Safari | Safari versions antérieures à 13.1.1 | ||
| Apple | N/A | iCloud pour Windows versions antérieures à 7.19 | ||
| Apple | macOS | macOS Mojave sans le correctif de sécurité 2020-003 | ||
| Apple | macOS | macOS High Sierra sans le correctif de sécurité 2020-003 | ||
| Apple | N/A | Windows Migration Assistant versions antérieures à 2.2.0.0 (v. 1A11) |
References
| Title | Publication Time | Tags | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "macOS Catalina versions ant\u00e9rieures \u00e0 10.15.5",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iCloud pour Windows versions 11.x ant\u00e9rieures \u00e0 11.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Safari versions ant\u00e9rieures \u00e0 13.1.1",
"product": {
"name": "Safari",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iCloud pour Windows versions ant\u00e9rieures \u00e0 7.19",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Mojave sans le correctif de s\u00e9curit\u00e9 2020-003",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS High Sierra sans le correctif de s\u00e9curit\u00e9 2020-003",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Windows Migration Assistant versions ant\u00e9rieures \u00e0 2.2.0.0 (v. 1A11)",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2020-9817",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9817"
},
{
"name": "CVE-2020-9788",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9788"
},
{
"name": "CVE-2019-20503",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-20503"
},
{
"name": "CVE-2020-3878",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3878"
},
{
"name": "CVE-2020-9839",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9839"
},
{
"name": "CVE-2020-9856",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9856"
},
{
"name": "CVE-2020-9834",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9834"
},
{
"name": "CVE-2020-9855",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9855"
},
{
"name": "CVE-2020-9844",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9844"
},
{
"name": "CVE-2020-9812",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9812"
},
{
"name": "CVE-2020-9826",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9826"
},
{
"name": "CVE-2020-9816",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9816"
},
{
"name": "CVE-2020-9790",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9790"
},
{
"name": "CVE-2020-9847",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9847"
},
{
"name": "CVE-2020-9789",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9789"
},
{
"name": "CVE-2020-9858",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9858"
},
{
"name": "CVE-2020-9825",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9825"
},
{
"name": "CVE-2020-9809",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9809"
},
{
"name": "CVE-2020-9857",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9857"
},
{
"name": "CVE-2020-9808",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9808"
},
{
"name": "CVE-2020-9831",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9831"
},
{
"name": "CVE-2020-9828",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9828"
},
{
"name": "CVE-2020-9801",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9801"
},
{
"name": "CVE-2020-9807",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9807"
},
{
"name": "CVE-2020-9852",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9852"
},
{
"name": "CVE-2020-9805",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9805"
},
{
"name": "CVE-2019-20044",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-20044"
},
{
"name": "CVE-2020-9806",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9806"
},
{
"name": "CVE-2020-9815",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9815"
},
{
"name": "CVE-2020-9841",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9841"
},
{
"name": "CVE-2020-9797",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9797"
},
{
"name": "CVE-2020-9793",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9793"
},
{
"name": "CVE-2020-9832",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9832"
},
{
"name": "CVE-2020-9837",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9837"
},
{
"name": "CVE-2020-9791",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9791"
},
{
"name": "CVE-2020-9813",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9813"
},
{
"name": "CVE-2019-14868",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-14868"
},
{
"name": "CVE-2020-9803",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9803"
},
{
"name": "CVE-2020-9843",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9843"
},
{
"name": "CVE-2020-9821",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9821"
},
{
"name": "CVE-2020-9811",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9811"
},
{
"name": "CVE-2020-9802",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9802"
},
{
"name": "CVE-2020-3882",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3882"
},
{
"name": "CVE-2020-9771",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9771"
},
{
"name": "CVE-2020-9814",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9814"
},
{
"name": "CVE-2020-9830",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9830"
},
{
"name": "CVE-2020-9827",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9827"
},
{
"name": "CVE-2020-9851",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9851"
},
{
"name": "CVE-2020-9842",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9842"
},
{
"name": "CVE-2020-9800",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9800"
},
{
"name": "CVE-2020-9772",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9772"
},
{
"name": "CVE-2020-9792",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9792"
},
{
"name": "CVE-2020-9822",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9822"
},
{
"name": "CVE-2020-9833",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9833"
},
{
"name": "CVE-2020-9824",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9824"
},
{
"name": "CVE-2020-9794",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9794"
},
{
"name": "CVE-2020-9795",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9795"
},
{
"name": "CVE-2020-9850",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9850"
},
{
"name": "CVE-2020-9804",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9804"
}
],
"links": [],
"reference": "CERTFR-2020-AVI-321",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2020-05-27T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance\net un contournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT211170 du 26 mai 2020",
"url": "https://support.apple.com/en-us/HT211170"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT211177 du 26 mai 2020",
"url": "https://support.apple.com/en-us/HT211177"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT211181 du 26 mai 2020",
"url": "https://support.apple.com/en-us/HT211181"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT211179 du 26 mai 2020",
"url": "https://support.apple.com/en-us/HT211179"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT211186 du 26 mai 2020",
"url": "https://support.apple.com/en-us/HT211186"
}
]
}
CERTFR-2020-AVI-309
Vulnerability from certfr_avis - Published: - Updated:
Une vulnérabilité a été découverte dans Apple Xcode. Elle permet à un attaquant de provoquer une atteinte à la confidentialité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneReferences
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Xcode versions ant\u00e9rieures \u00e0 11.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2020-11008",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-11008"
}
],
"links": [],
"reference": "CERTFR-2020-AVI-309",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2020-05-22T00:00:00.000000"
}
],
"risks": [
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Apple Xcode. Elle permet \u00e0 un\nattaquant de provoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
"title": "Vuln\u00e9rabilit\u00e9 dans Apple Xcode",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT211183 du 20 mai 2020",
"url": "https://support.apple.com/fr-fr/HT211183"
}
]
}
CERTFR-2020-AVI-229
Vulnerability from certfr_avis - Published: - Updated:
Une vulnérabilité a été découverte dans Apple Xcode. Elle permet à un attaquant de provoquer une atteinte à la confidentialité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneReferences
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Xcode versions ant\u00e9rieures \u00e0 11.4.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2020-5260",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-5260"
}
],
"links": [],
"reference": "CERTFR-2020-AVI-229",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2020-04-17T00:00:00.000000"
}
],
"risks": [
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Apple Xcode. Elle permet \u00e0 un\nattaquant de provoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
"title": "Vuln\u00e9rabilit\u00e9 dans Apple Xcode",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT211141 du 15 avril 2020",
"url": "https://support.apple.com/fr-fr/HT211141"
}
]
}
CERTFR-2020-AVI-171
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Apple iCloud pour Windows. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et une injection de code indirecte à distance (XSS).
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "iCloud pour Windows 10.x versions ant\u00e9rieures \u00e0 10.9.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iCloud pour Windows 7.x versions ant\u00e9rieures \u00e0 7.18",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2020-3887",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3887"
},
{
"name": "CVE-2020-3894",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3894"
},
{
"name": "CVE-2020-9783",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9783"
},
{
"name": "CVE-2020-3910",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3910"
},
{
"name": "CVE-2020-3895",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3895"
},
{
"name": "CVE-2020-3909",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3909"
},
{
"name": "CVE-2020-3885",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3885"
},
{
"name": "CVE-2020-3897",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3897"
},
{
"name": "CVE-2020-3899",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3899"
},
{
"name": "CVE-2020-3902",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3902"
},
{
"name": "CVE-2020-3901",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3901"
},
{
"name": "CVE-2020-3911",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3911"
},
{
"name": "CVE-2020-3900",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3900"
}
],
"links": [],
"reference": "CERTFR-2020-AVI-171",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2020-03-26T00:00:00.000000"
}
],
"risks": [
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Apple iCloud pour\nWindows. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de\ncode arbitraire \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des\ndonn\u00e9es et une injection de code indirecte \u00e0 distance (XSS).\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Apple iCloud pour Windows",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT211106 du 26 mars 2020",
"url": "https://support.apple.com/en-us/HT211106"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT211107 du 26 mars 2020",
"url": "https://support.apple.com/en-us/HT211107"
}
]
}
CERTFR-2020-AVI-170
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, une atteinte à la confidentialité des données et une élévation de privilèges.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Apple | Safari | Safari versions antérieures à 13.1 | ||
| Apple | N/A | tvOS versions antérieures à 13.4 | ||
| Apple | N/A | iOS versions antérieures à 13.4 | ||
| Apple | N/A | watchOS versions antérieures à 6.2 | ||
| Apple | N/A | iTunes versions antérieures à 12.10.5 | ||
| Apple | macOS | macOS Catalina versions antérieures à 10.15.4 | ||
| Apple | N/A | iPadOS versions antérieures à 13.4 |
References
| Title | Publication Time | Tags | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Safari versions ant\u00e9rieures \u00e0 13.1",
"product": {
"name": "Safari",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "tvOS versions ant\u00e9rieures \u00e0 13.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS versions ant\u00e9rieures \u00e0 13.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "watchOS versions ant\u00e9rieures \u00e0 6.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iTunes versions ant\u00e9rieures \u00e0 12.10.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Catalina versions ant\u00e9rieures \u00e0 10.15.4",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iPadOS versions ant\u00e9rieures \u00e0 13.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2020-3904",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3904"
},
{
"name": "CVE-2020-3887",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3887"
},
{
"name": "CVE-2020-3894",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3894"
},
{
"name": "CVE-2020-3851",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3851"
},
{
"name": "CVE-2020-9783",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9783"
},
{
"name": "CVE-2020-3884",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3884"
},
{
"name": "CVE-2020-3910",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3910"
},
{
"name": "CVE-2020-3895",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3895"
},
{
"name": "CVE-2020-3912",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3912"
},
{
"name": "CVE-2020-9784",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9784"
},
{
"name": "CVE-2020-3909",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3909"
},
{
"name": "CVE-2020-3891",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3891"
},
{
"name": "CVE-2020-3893",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3893"
},
{
"name": "CVE-2020-3917",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3917"
},
{
"name": "CVE-2020-3914",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3914"
},
{
"name": "CVE-2020-3888",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3888"
},
{
"name": "CVE-2020-3916",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3916"
},
{
"name": "CVE-2019-19232",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19232"
},
{
"name": "CVE-2020-3913",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3913"
},
{
"name": "CVE-2020-9780",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9780"
},
{
"name": "CVE-2020-3885",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3885"
},
{
"name": "CVE-2020-3897",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3897"
},
{
"name": "CVE-2020-9781",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9781"
},
{
"name": "CVE-2020-3906",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3906"
},
{
"name": "CVE-2020-3883",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3883"
},
{
"name": "CVE-2020-3905",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3905"
},
{
"name": "CVE-2020-9777",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9777"
},
{
"name": "CVE-2019-8853",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8853"
},
{
"name": "CVE-2020-3892",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3892"
},
{
"name": "CVE-2020-3899",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3899"
},
{
"name": "CVE-2020-3902",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3902"
},
{
"name": "CVE-2020-3901",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3901"
},
{
"name": "CVE-2020-3890",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3890"
},
{
"name": "CVE-2020-3881",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3881"
},
{
"name": "CVE-2020-9785",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9785"
},
{
"name": "CVE-2020-3908",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3908"
},
{
"name": "CVE-2019-14615",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-14615"
},
{
"name": "CVE-2020-3889",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3889"
},
{
"name": "CVE-2020-9776",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9776"
},
{
"name": "CVE-2020-3903",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3903"
},
{
"name": "CVE-2020-3911",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3911"
},
{
"name": "CVE-2020-9775",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9775"
},
{
"name": "CVE-2020-9769",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9769"
},
{
"name": "CVE-2020-3900",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3900"
},
{
"name": "CVE-2020-3919",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3919"
},
{
"name": "CVE-2020-9773",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9773"
},
{
"name": "CVE-2020-9768",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9768"
},
{
"name": "CVE-2020-3907",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3907"
},
{
"name": "CVE-2020-9770",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9770"
}
],
"links": [],
"reference": "CERTFR-2020-AVI-170",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2020-03-25T00:00:00.000000"
},
{
"description": "typographie",
"revision_date": "2020-03-27T00:00:00.000000"
}
],
"risks": [
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire, une atteinte \u00e0 la confidentialit\u00e9 des\ndonn\u00e9es et une \u00e9l\u00e9vation de privil\u00e8ges.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT211102 du 24 mars 2020",
"url": "https://support.apple.com/fr-fr/HT211102"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT211105 du 24 mars 2020",
"url": "https://support.apple.com/fr-fr/HT211105"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT211100 du 24 mars 2020",
"url": "https://support.apple.com/fr-fr/HT211100"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT211103 du 24 mars 2020",
"url": "https://support.apple.com/fr-fr/HT211103"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT211104 du 24 mars 2020",
"url": "https://support.apple.com/fr-fr/HT211104"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT211101 du 24 mars 2020",
"url": "https://support.apple.com/fr-fr/HT211101"
}
]
}
CERTFR-2020-AVI-063
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un contournement de la politique de sécurité et une atteinte à l'intégrité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Apple | macOS | macOS Catalina versions antérieures à 10.15.3 | ||
| Apple | macOS | macOS Mojave sans le correctif de sécurité 2020-001 | ||
| Apple | N/A | iCloud pour Windows versions 10.x antérieures à 10.9.2 | ||
| Apple | N/A | iOS versions antérieures à 13.3.1 | ||
| Apple | N/A | watchOS versions antérieures à6.1.2 | ||
| Apple | N/A | iCloud pour Windows versions antérieures à 7.17 | ||
| Apple | Safari | Safari versions antérieures à 13.0.5 | ||
| Apple | N/A | iPadOS versions antérieures à 13.3.1 | ||
| Apple | N/A | tvOS versions antérieures à13.3.1 | ||
| Apple | macOS | macOS High Sierra sans le correctif de sécurité 2020-001 | ||
| Apple | N/A | iTunes versions antérieures à 12.10.4 |
References
| Title | Publication Time | Tags | ||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "macOS Catalina versions ant\u00e9rieures \u00e0 10.15.3",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Mojave sans le correctif de s\u00e9curit\u00e9 2020-001",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iCloud pour Windows versions 10.x ant\u00e9rieures \u00e0 10.9.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS versions ant\u00e9rieures \u00e0 13.3.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "watchOS versions ant\u00e9rieures \u00e06.1.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iCloud pour Windows versions ant\u00e9rieures \u00e0 7.17",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Safari versions ant\u00e9rieures \u00e0 13.0.5",
"product": {
"name": "Safari",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iPadOS versions ant\u00e9rieures \u00e0 13.3.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "tvOS versions ant\u00e9rieures \u00e013.3.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS High Sierra sans le correctif de s\u00e9curit\u00e9 2020-001",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iTunes versions ant\u00e9rieures \u00e0 12.10.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2020-3859",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3859"
},
{
"name": "CVE-2020-3878",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3878"
},
{
"name": "CVE-2020-3860",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3860"
},
{
"name": "CVE-2020-3838",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3838"
},
{
"name": "CVE-2020-3873",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3873"
},
{
"name": "CVE-2020-3855",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3855"
},
{
"name": "CVE-2019-18634",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18634"
},
{
"name": "CVE-2020-3869",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3869"
},
{
"name": "CVE-2020-3843",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3843"
},
{
"name": "CVE-2020-3862",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3862"
},
{
"name": "CVE-2020-3865",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3865"
},
{
"name": "CVE-2020-3853",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3853"
},
{
"name": "CVE-2020-3857",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3857"
},
{
"name": "CVE-2020-3858",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3858"
},
{
"name": "CVE-2020-3849",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3849"
},
{
"name": "CVE-2020-3845",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3845"
},
{
"name": "CVE-2020-3870",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3870"
},
{
"name": "CVE-2020-3837",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3837"
},
{
"name": "CVE-2020-3834",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3834"
},
{
"name": "CVE-2020-3831",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3831"
},
{
"name": "CVE-2020-3830",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3830"
},
{
"name": "CVE-2020-3835",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3835"
},
{
"name": "CVE-2020-3848",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3848"
},
{
"name": "CVE-2020-3841",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3841"
},
{
"name": "CVE-2020-3872",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3872"
},
{
"name": "CVE-2020-3826",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3826"
},
{
"name": "CVE-2020-3867",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3867"
},
{
"name": "CVE-2020-3828",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3828"
},
{
"name": "CVE-2020-3850",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3850"
},
{
"name": "CVE-2020-3839",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3839"
},
{
"name": "CVE-2020-3842",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3842"
},
{
"name": "CVE-2020-3827",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3827"
},
{
"name": "CVE-2020-3874",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3874"
},
{
"name": "CVE-2020-3854",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3854"
},
{
"name": "CVE-2020-3871",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3871"
},
{
"name": "CVE-2019-11043",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11043"
},
{
"name": "CVE-2020-3833",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3833"
},
{
"name": "CVE-2020-3844",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3844"
},
{
"name": "CVE-2020-3877",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3877"
},
{
"name": "CVE-2020-3868",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3868"
},
{
"name": "CVE-2020-3856",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3856"
},
{
"name": "CVE-2020-3846",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3846"
},
{
"name": "CVE-2020-3861",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3861"
},
{
"name": "CVE-2020-3825",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3825"
},
{
"name": "CVE-2020-3840",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3840"
},
{
"name": "CVE-2020-3829",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3829"
},
{
"name": "CVE-2020-3836",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3836"
},
{
"name": "CVE-2020-3875",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3875"
},
{
"name": "CVE-2020-3847",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3847"
},
{
"name": "CVE-2020-3866",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3866"
}
],
"links": [],
"reference": "CERTFR-2020-AVI-063",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2020-01-29T00:00:00.000000"
},
{
"description": "Ajout des avis HT210947 et HT210948 du 28 janvier 2020",
"revision_date": "2020-01-30T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire \u00e0 distance, un contournement de la\npolitique de s\u00e9curit\u00e9 et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210918 du 28 janvier 2020",
"url": "https://support.apple.com/en-us/HT210918"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210948 du 28 janvier 2020",
"url": "https://support.apple.com/en-us/HT210948"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210923 du 28 janvier 2020",
"url": "https://support.apple.com/en-us/HT210923"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210922 du 28 janvier 2020",
"url": "https://support.apple.com/en-us/HT210922"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210921 du 28 janvier 2020",
"url": "https://support.apple.com/en-us/HT210921"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210947 du 28 janvier 2020",
"url": "https://support.apple.com/en-us/HT210947"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210920 du 28 janvier 2020",
"url": "https://support.apple.com/en-us/HT210920"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210919 du 28 janvier 2020",
"url": "https://support.apple.com/en-us/HT210919"
}
]
}
CERTFR-2019-AVI-620
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un contournement de la politique de sécurité et une atteinte à la confidentialité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Apple | N/A | iOS versions 13.x antérieures à 13.3 | ||
| Apple | N/A | Xcode versions antérieures à 11.3 | ||
| Apple | N/A | watchOS versions 5.x antérieures à 5.3.4 | ||
| Apple | N/A | Mojave sans le correctif de sécurité 2019-002 | ||
| Apple | N/A | watchOS versions 6.x antérieures à 6.1.1 | ||
| Apple | N/A | tvOS versions antérieures à 13.3 | ||
| Apple | N/A | High Sierra sans le correctif de sécurité 2019-007 | ||
| Apple | N/A | iPadOS versions antérieures à 13.3 | ||
| Apple | Safari | Safari versions antérieures à 13.0.4 | ||
| Apple | macOS | macOS Catalina versions antérieures à 10.15.2 | ||
| Apple | N/A | iOS versions 12.x antérieures à 12.4.4 |
References
| Title | Publication Time | Tags | ||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "iOS versions 13.x ant\u00e9rieures \u00e0 13.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Xcode versions ant\u00e9rieures \u00e0 11.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "watchOS versions 5.x ant\u00e9rieures \u00e0 5.3.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Mojave sans le correctif de s\u00e9curit\u00e9 2019-002",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "watchOS versions 6.x ant\u00e9rieures \u00e0 6.1.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "tvOS versions ant\u00e9rieures \u00e0 13.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "High Sierra sans le correctif de s\u00e9curit\u00e9 2019-007",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iPadOS versions ant\u00e9rieures \u00e0 13.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Safari versions ant\u00e9rieures \u00e0 13.0.4",
"product": {
"name": "Safari",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Catalina versions ant\u00e9rieures \u00e0 10.15.2",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS versions 12.x ant\u00e9rieures \u00e0 12.4.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2018-14463",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14463"
},
{
"name": "CVE-2019-8847",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8847"
},
{
"name": "CVE-2018-14468",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14468"
},
{
"name": "CVE-2018-16451",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-16451"
},
{
"name": "CVE-2015-1545",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-1545"
},
{
"name": "CVE-2012-2668",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-2668"
},
{
"name": "CVE-2012-1164",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1164"
},
{
"name": "CVE-2018-14881",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14881"
},
{
"name": "CVE-2017-16808",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-16808"
},
{
"name": "CVE-2019-13057",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13057"
},
{
"name": "CVE-2019-8840",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8840"
},
{
"name": "CVE-2019-8835",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8835"
},
{
"name": "CVE-2018-16227",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-16227"
},
{
"name": "CVE-2019-15165",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-15165"
},
{
"name": "CVE-2019-8832",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8832"
},
{
"name": "CVE-2019-8844",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8844"
},
{
"name": "CVE-2019-8857",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8857"
},
{
"name": "CVE-2019-8841",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8841"
},
{
"name": "CVE-2019-8837",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8837"
},
{
"name": "CVE-2018-16228",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-16228"
},
{
"name": "CVE-2019-15164",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-15164"
},
{
"name": "CVE-2019-8852",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8852"
},
{
"name": "CVE-2019-8839",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8839"
},
{
"name": "CVE-2018-14465",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14465"
},
{
"name": "CVE-2019-15162",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-15162"
},
{
"name": "CVE-2018-10103",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-10103"
},
{
"name": "CVE-2018-14880",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14880"
},
{
"name": "CVE-2019-15161",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-15161"
},
{
"name": "CVE-2018-14470",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14470"
},
{
"name": "CVE-2019-8856",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8856"
},
{
"name": "CVE-2018-14469",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14469"
},
{
"name": "CVE-2018-14879",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14879"
},
{
"name": "CVE-2019-8853",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8853"
},
{
"name": "CVE-2013-4449",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4449"
},
{
"name": "CVE-2018-10105",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-10105"
},
{
"name": "CVE-2018-14466",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14466"
},
{
"name": "CVE-2019-8830",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8830"
},
{
"name": "CVE-2019-8833",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8833"
},
{
"name": "CVE-2019-15163",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-15163"
},
{
"name": "CVE-2018-16301",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-16301"
},
{
"name": "CVE-2018-16230",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-16230"
},
{
"name": "CVE-2018-16452",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-16452"
},
{
"name": "CVE-2019-8848",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8848"
},
{
"name": "CVE-2019-8842",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8842"
},
{
"name": "CVE-2018-14464",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14464"
},
{
"name": "CVE-2018-14462",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14462"
},
{
"name": "CVE-2019-8838",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8838"
},
{
"name": "CVE-2019-15166",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-15166"
},
{
"name": "CVE-2018-14461",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14461"
},
{
"name": "CVE-2019-8828",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8828"
},
{
"name": "CVE-2018-14467",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14467"
},
{
"name": "CVE-2019-13565",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13565"
},
{
"name": "CVE-2019-8846",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8846"
},
{
"name": "CVE-2018-14882",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14882"
},
{
"name": "CVE-2019-15167",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-15167"
},
{
"name": "CVE-2019-15903",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-15903"
},
{
"name": "CVE-2018-16229",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-16229"
},
{
"name": "CVE-2018-16300",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-16300"
},
{
"name": "CVE-2019-8836",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8836"
}
],
"links": [],
"reference": "CERTFR-2019-AVI-620",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2019-12-11T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire \u00e0 distance, un contournement de la\npolitique de s\u00e9curit\u00e9 et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210792 du 10 d\u00e9cembre 2019",
"url": "https://support.apple.com/en-us/HT210792"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210789 du 10 d\u00e9cembre 2019",
"url": "https://support.apple.com/en-us/HT210789"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210787 du 10 d\u00e9cembre 2019",
"url": "https://support.apple.com/en-us/HT210787"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210785 du 10 d\u00e9cembre 2019",
"url": "https://support.apple.com/en-us/HT210785"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210796 du 10 d\u00e9cembre 2019",
"url": "https://support.apple.com/en-us/HT210796"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210791 du 10 d\u00e9cembre 2019",
"url": "https://support.apple.com/en-us/HT210791"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210790 du 10 d\u00e9cembre 2019",
"url": "https://support.apple.com/en-us/HT210790"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210788 du 10 d\u00e9cembre 2019",
"url": "https://support.apple.com/en-us/HT210788"
}
]
}
CERTFR-2019-AVI-539
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple . Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, une exécution de code arbitraire à distance, un déni de service ou un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Apple | N/A | watchOS versions antérieures à 6.1 | ||
| Apple | N/A | tvOS versions antérieures à 13.2 | ||
| Apple | N/A | iCloud pour Windows 10 versions antérieures à 11.0 | ||
| Apple | Safari | Safari versions antérieures à 13.0.3 | ||
| Apple | N/A | iOS versions antérieures à 13.2 | ||
| Apple | N/A | iPadOS versions antérieures à 13.2 | ||
| Apple | N/A | iCloud pour Windows 7 versions antérieures à 7.15 | ||
| Apple | N/A | iTunes versions antérieures à 12.10.2 | ||
| Apple | macOS | macOS Catalina versions antérieures à 10.15.1 |
References
| Title | Publication Time | Tags | |
|---|---|---|---|
|
|
|||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "watchOS versions ant\u00e9rieures \u00e0 6.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "tvOS versions ant\u00e9rieures \u00e0 13.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iCloud pour Windows 10 versions ant\u00e9rieures \u00e0 11.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Safari versions ant\u00e9rieures \u00e0 13.0.3",
"product": {
"name": "Safari",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS versions ant\u00e9rieures \u00e0 13.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iPadOS versions ant\u00e9rieures \u00e0 13.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iCloud pour Windows 7 versions ant\u00e9rieures \u00e0 7.15",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iTunes versions ant\u00e9rieures \u00e0 12.10.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Catalina versions ant\u00e9rieures \u00e0 10.15.1",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2019-8788",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8788"
},
{
"name": "CVE-2019-8764",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8764"
},
{
"name": "CVE-2019-8793",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8793"
},
{
"name": "CVE-2019-8715",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8715"
},
{
"name": "CVE-2019-8747",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8747"
},
{
"name": "CVE-2018-12153",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-12153"
},
{
"name": "CVE-2019-8767",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8767"
},
{
"name": "CVE-2019-8813",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8813"
},
{
"name": "CVE-2019-8736",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8736"
},
{
"name": "CVE-2019-8756",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8756"
},
{
"name": "CVE-2019-8808",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8808"
},
{
"name": "CVE-2019-8815",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8815"
},
{
"name": "CVE-2019-8807",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8807"
},
{
"name": "CVE-2019-8765",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8765"
},
{
"name": "CVE-2019-8710",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8710"
},
{
"name": "CVE-2019-8509",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8509"
},
{
"name": "CVE-2017-7152",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7152"
},
{
"name": "CVE-2019-8794",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8794"
},
{
"name": "CVE-2019-8804",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8804"
},
{
"name": "CVE-2019-8706",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8706"
},
{
"name": "CVE-2019-8785",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8785"
},
{
"name": "CVE-2019-8708",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8708"
},
{
"name": "CVE-2019-8743",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8743"
},
{
"name": "CVE-2019-8749",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8749"
},
{
"name": "CVE-2019-8775",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8775"
},
{
"name": "CVE-2019-8716",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8716"
},
{
"name": "CVE-2019-8812",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8812"
},
{
"name": "CVE-2019-8802",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8802"
},
{
"name": "CVE-2019-8784",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8784"
},
{
"name": "CVE-2019-8737",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8737"
},
{
"name": "CVE-2019-8821",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8821"
},
{
"name": "CVE-2019-8820",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8820"
},
{
"name": "CVE-2019-8795",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8795"
},
{
"name": "CVE-2019-8766",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8766"
},
{
"name": "CVE-2019-8816",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8816"
},
{
"name": "CVE-2019-8819",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8819"
},
{
"name": "CVE-2019-8789",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8789"
},
{
"name": "CVE-2019-8759",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8759"
},
{
"name": "CVE-2019-8744",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8744"
},
{
"name": "CVE-2019-8822",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8822"
},
{
"name": "CVE-2019-8801",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8801"
},
{
"name": "CVE-2019-8803",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8803"
},
{
"name": "CVE-2019-8783",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8783"
},
{
"name": "CVE-2019-8805",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8805"
},
{
"name": "CVE-2019-8750",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8750"
},
{
"name": "CVE-2018-12152",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-12152"
},
{
"name": "CVE-2019-8786",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8786"
},
{
"name": "CVE-2019-8787",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8787"
},
{
"name": "CVE-2019-8823",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8823"
},
{
"name": "CVE-2019-8798",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8798"
},
{
"name": "CVE-2019-8817",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8817"
},
{
"name": "CVE-2019-8761",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8761"
},
{
"name": "CVE-2019-8814",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8814"
},
{
"name": "CVE-2019-8797",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8797"
},
{
"name": "CVE-2018-12154",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-12154"
},
{
"name": "CVE-2019-8811",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8811"
},
{
"name": "CVE-2019-8782",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8782"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Apple MacOS du 29 octobre 2019",
"url": "https://support.apple.com/fr-fr/HT210722"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 iCloud pour Windows 11.0 du 30 octobre 2019",
"url": "https://support.apple.com/fr-fr/HT210727"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 iOS et iPadOS du 28 octobre 2019",
"url": "https://support.apple.com/fr-fr/HT210721"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Apple tvOS du 28 octobre 2019",
"url": "https://support.apple.com/fr-fr/HT210723"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 iCloud pour Windows 7.15 du 30 octobre 2019",
"url": "https://support.apple.com/fr-fr/HT210728"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Safari du 28 octobre 2019",
"url": "https://support.apple.com/fr-fr/HT210725"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 iTunes du 30 octobre 2019",
"url": "https://support.apple.com/fr-fr/HT210726"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Apple WatchOS du 29 octobre 2019",
"url": "https://support.apple.com/fr-fr/HT210724"
}
],
"reference": "CERTFR-2019-AVI-539",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2019-10-30T00:00:00.000000"
},
{
"description": "Rajout des avis pour Safari, iOS, iPadOS, tvOS, iTunes et iCloud",
"revision_date": "2019-10-31T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple\n. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire, une ex\u00e9cution de code arbitraire \u00e0\ndistance, un d\u00e9ni de service ou un contournement de la politique de\ns\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple du 28, 29 et 30 octobre 2019",
"url": null
}
]
}
CERTFR-2019-AVI-483
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur, une exécution de code arbitraire à distance et une atteinte à la confidentialité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "iCloud pour Windows versions 7.x ant\u00e9rieures \u00e0 7.14",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Catalina versions ant\u00e9rieures \u00e0 10.15",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iTunes versions ant\u00e9rieures \u00e0 12.10.1 sur Windows",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iCloud pour Windows versions 10.x ant\u00e9rieures \u00e0 10.7",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2019-8717",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8717"
},
{
"name": "CVE-2019-8769",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8769"
},
{
"name": "CVE-2019-8701",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8701"
},
{
"name": "CVE-2019-8707",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8707"
},
{
"name": "CVE-2019-8719",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8719"
},
{
"name": "CVE-2019-8755",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8755"
},
{
"name": "CVE-2019-8763",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8763"
},
{
"name": "CVE-2019-8781",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8781"
},
{
"name": "CVE-2019-11041",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11041"
},
{
"name": "CVE-2019-8705",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8705"
},
{
"name": "CVE-2019-8625",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8625"
},
{
"name": "CVE-2019-8748",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8748"
},
{
"name": "CVE-2019-8768",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8768"
},
{
"name": "CVE-2019-8770",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8770"
},
{
"name": "CVE-2019-8730",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8730"
},
{
"name": "CVE-2019-8720",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8720"
},
{
"name": "CVE-2019-8758",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8758"
},
{
"name": "CVE-2019-8735",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8735"
},
{
"name": "CVE-2019-8726",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8726"
},
{
"name": "CVE-2019-8745",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8745"
},
{
"name": "CVE-2019-8733",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8733"
},
{
"name": "CVE-2019-8772",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8772"
},
{
"name": "CVE-2019-11042",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11042"
},
{
"name": "CVE-2019-8757",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8757"
}
],
"links": [],
"reference": "CERTFR-2019-AVI-483",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2019-10-08T00:00:00.000000"
}
],
"risks": [
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer un\nprobl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur, une ex\u00e9cution de code\narbitraire \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210634 du 07 octobre 2019",
"url": "https://support.apple.com/en-us/HT210634"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210635 du 07 octobre 2019",
"url": "https://support.apple.com/en-us/HT210635"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210637 du 07 octobre 2019",
"url": "https://support.apple.com/en-us/HT210637"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210636 du 07 octobre 2019",
"url": "https://support.apple.com/en-us/HT210636"
}
]
}
CERTFR-2019-AVI-473
Vulnerability from certfr_avis - Published: - Updated:
Une vulnérabilité a été découverte dans Apple iOS et iPadOS. Elle permet à un attaquant de provoquer un contournement de la politique de sécurité et une élévation de privilèges.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "iOS versions ant\u00e9rieures \u00e0 13.1.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iPadOS versions ant\u00e9rieures \u00e0 13.1.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2019-8779",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8779"
}
],
"links": [],
"reference": "CERTFR-2019-AVI-473",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2019-09-30T00:00:00.000000"
}
],
"risks": [
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Apple iOS et iPadOS. Elle permet\n\u00e0 un attaquant de provoquer un contournement de la politique de s\u00e9curit\u00e9\net une \u00e9l\u00e9vation de privil\u00e8ges.\n",
"title": "Vuln\u00e9rabilit\u00e9 dans Apple iOS et iPadOS",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple du 27 septembre 2019",
"url": "https://support.apple.com/en-us/HT210624"
}
]
}
CERTFR-2019-AVI-469
Vulnerability from certfr_avis - Published: - Updated:
Une vulnérabilité a été découverte dans les produits Apple. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance et un déni de service à distance.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Apple | macOS | macOS Sierra sans le correctif de sécurité 2019-005 | ||
| Apple | N/A | watchOS versions antérieures à 5.3.2 | ||
| Apple | macOS | macOS Mojave 10.14.6 sans le correctif de sécurité Supplemental Update 2 | ||
| Apple | macOS | macOS High Sierra sans le correctif de sécurité 2019-005 | ||
| Apple | N/A | iOS versions antérieures à 12.4.2 |
References
| Title | Publication Time | Tags | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "macOS Sierra sans le correctif de s\u00e9curit\u00e9 2019-005",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "watchOS versions ant\u00e9rieures \u00e0 5.3.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Mojave 10.14.6 sans le correctif de s\u00e9curit\u00e9 Supplemental Update 2",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS High Sierra sans le correctif de s\u00e9curit\u00e9 2019-005",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS versions ant\u00e9rieures \u00e0 12.4.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2019-8641",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8641"
}
],
"links": [],
"reference": "CERTFR-2019-AVI-469",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2019-09-27T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans les produits Apple. Elle permet\n\u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance\net un d\u00e9ni de service \u00e0 distance.\n",
"title": "Vuln\u00e9rabilit\u00e9 dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210588 du 26 septembre 2019",
"url": "https://support.apple.com/en-us/HT210588"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210589 du 26 septembre 2019",
"url": "https://support.apple.com/en-us/HT210589"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210590 du 26 septembre 2019",
"url": "https://support.apple.com/en-us/HT210590"
}
]
}
CERTFR-2019-AVI-412
Vulnerability from certfr_avis - Published: - Updated:
Une vulnérabilité a été découverte dans les produits Apple. Elle permet à un attaquant de provoquer une exécution de code arbitraire et une élévation de privilèges.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "iOS versions ant\u00e9rieures \u00e0 12.4.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Mojave versions ant\u00e9rieures \u00e0 10.14.6",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "tvOS versions ant\u00e9rieures \u00e0 12.4.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2019-8605",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8605"
}
],
"links": [],
"reference": "CERTFR-2019-AVI-412",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2019-08-27T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans les produits Apple. Elle permet\n\u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire et une\n\u00e9l\u00e9vation de privil\u00e8ges.\n",
"title": "Vuln\u00e9rabilit\u00e9 dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210548 du 26 ao\u00fbt 2019",
"url": "https://support.apple.com/en-us/HT210548"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210550 du 26 ao\u00fbt 2019",
"url": "https://support.apple.com/en-us/HT210550"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210549 du 26 ao\u00fbt 2019",
"url": "https://support.apple.com/en-us/HT210549"
}
]
}
CERTFR-2019-AVI-356
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Apple | N/A | iOS versions antérieures à 12.4 | ||
| Apple | N/A | iCloud for Windows versions antérieures à 7.13 | ||
| Apple | Safari | Safari versions antérieures à 12.1.2 | ||
| Apple | macOS | macOS High Sierra 10.13.6 sans le correctif de sécurité 2019-004 | ||
| Apple | N/A | tvOS versions antérieures à 12.4 | ||
| Apple | macOS | macOS Mojave versions antérieures à 10.14.5 | ||
| Apple | macOS | macOS Sierra 10.12.6 sans le correctif de sécurité 2019-004 | ||
| Apple | N/A | watchOS versions antérieures à 5.3 | ||
| Apple | N/A | iCloud for Windows versions 10.x antérieures à 10.6 | ||
| Apple | N/A | iTunes versions antérieures à 12.9.6 |
References
| Title | Publication Time | Tags | ||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "iOS versions ant\u00e9rieures \u00e0 12.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iCloud for Windows versions ant\u00e9rieures \u00e0 7.13",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Safari versions ant\u00e9rieures \u00e0 12.1.2",
"product": {
"name": "Safari",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS High Sierra 10.13.6 sans le correctif de s\u00e9curit\u00e9 2019-004",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "tvOS versions ant\u00e9rieures \u00e0 12.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Mojave versions ant\u00e9rieures \u00e0 10.14.5",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Sierra 10.12.6 sans le correctif de s\u00e9curit\u00e9 2019-004",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "watchOS versions ant\u00e9rieures \u00e0 5.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iCloud for Windows versions 10.x ant\u00e9rieures \u00e0 10.6",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iTunes versions ant\u00e9rieures \u00e0 12.9.6",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2019-8682",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8682"
},
{
"name": "CVE-2019-8649",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8649"
},
{
"name": "CVE-2019-8693",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8693"
},
{
"name": "CVE-2019-8656",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8656"
},
{
"name": "CVE-2019-8647",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8647"
},
{
"name": "CVE-2019-8648",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8648"
},
{
"name": "CVE-2019-8684",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8684"
},
{
"name": "CVE-2019-8657",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8657"
},
{
"name": "CVE-2018-19860",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-19860"
},
{
"name": "CVE-2019-8680",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8680"
},
{
"name": "CVE-2019-8695",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8695"
},
{
"name": "CVE-2019-8658",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8658"
},
{
"name": "CVE-2019-8679",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8679"
},
{
"name": "CVE-2019-8646",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8646"
},
{
"name": "CVE-2019-8690",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8690"
},
{
"name": "CVE-2019-8699",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8699"
},
{
"name": "CVE-2019-8698",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8698"
},
{
"name": "CVE-2019-8672",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8672"
},
{
"name": "CVE-2019-8670",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8670"
},
{
"name": "CVE-2019-8688",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8688"
},
{
"name": "CVE-2019-8641",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8641"
},
{
"name": "CVE-2019-8665",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8665"
},
{
"name": "CVE-2019-8685",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8685"
},
{
"name": "CVE-2019-8671",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8671"
},
{
"name": "CVE-2018-16860",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-16860"
},
{
"name": "CVE-2019-8681",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8681"
},
{
"name": "CVE-2019-8673",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8673"
},
{
"name": "CVE-2019-8694",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8694"
},
{
"name": "CVE-2019-8678",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8678"
},
{
"name": "CVE-2019-8686",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8686"
},
{
"name": "CVE-2019-13118",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13118"
},
{
"name": "CVE-2019-8659",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8659"
},
{
"name": "CVE-2019-8669",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8669"
},
{
"name": "CVE-2019-8697",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8697"
},
{
"name": "CVE-2019-8692",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8692"
},
{
"name": "CVE-2019-8691",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8691"
},
{
"name": "CVE-2019-8662",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8662"
},
{
"name": "CVE-2019-8624",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8624"
},
{
"name": "CVE-2019-8687",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8687"
},
{
"name": "CVE-2019-8666",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8666"
},
{
"name": "CVE-2019-8683",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8683"
},
{
"name": "CVE-2019-8677",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8677"
},
{
"name": "CVE-2019-8644",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8644"
},
{
"name": "CVE-2019-8667",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8667"
},
{
"name": "CVE-2019-8660",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8660"
},
{
"name": "CVE-2019-8689",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8689"
},
{
"name": "CVE-2019-8661",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8661"
},
{
"name": "CVE-2019-8663",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8663"
},
{
"name": "CVE-2019-8676",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8676"
}
],
"links": [],
"reference": "CERTFR-2019-AVI-356",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2019-07-23T00:00:00.000000"
},
{
"description": "Ajout des bulletins de s\u00e9curit\u00e9 Apple HT210356, HT210357 et HT210358",
"revision_date": "2019-07-24T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance\net un contournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210356 du 23 juillet 2019",
"url": "https://support.apple.com/en-us/HT210356"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210355 du 22 juillet 2019",
"url": "https://support.apple.com/en-us/HT210355"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210357 du 23 juillet 2019",
"url": "https://support.apple.com/en-us/HT210357"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210358 du 23 juillet 2019",
"url": "https://support.apple.com/en-us/HT210358"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210346 du 22 juillet 2019",
"url": "https://support.apple.com/en-us/HT210346"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210348 du 22 juillet 2019",
"url": "https://support.apple.com/en-us/HT210348"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210353 du 22 juillet 2019",
"url": "https://support.apple.com/en-us/HT210353"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210351 du 22 juillet 2019",
"url": "https://support.apple.com/en-us/HT210351"
}
]
}
CERTFR-2019-AVI-288
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Apple AirPort. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "AirPort Express, AirPort Extreme et AirPort Time Capsule base stations avec 802.11n sans la mise \u00e0 jour du microgiciel version 7.8.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2019-8575",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8575"
},
{
"name": "CVE-2018-6918",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-6918"
},
{
"name": "CVE-2019-8588",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8588"
},
{
"name": "CVE-2019-7291",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7291"
},
{
"name": "CVE-2019-8580",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8580"
},
{
"name": "CVE-2019-8572",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8572"
},
{
"name": "CVE-2019-8581",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8581"
},
{
"name": "CVE-2019-8578",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8578"
}
],
"links": [],
"reference": "CERTFR-2019-AVI-288",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2019-06-21T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Apple AirPort.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance\net un contournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Apple AirPort",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210091 du 20 juin 2019",
"url": "https://support.apple.com/en-us/HT210091"
}
]
}
CERTFR-2019-AVI-269
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Apple iCloud pour Windows. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et une élévation de privilèges.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "iCloud for Windows versions ant\u00e9rieures \u00e0 10.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2019-8596",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8596"
},
{
"name": "CVE-2019-8595",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8595"
},
{
"name": "CVE-2019-8615",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8615"
},
{
"name": "CVE-2019-8609",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8609"
},
{
"name": "CVE-2019-8571",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8571"
},
{
"name": "CVE-2019-8577",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8577"
},
{
"name": "CVE-2019-8600",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8600"
},
{
"name": "CVE-2019-8608",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8608"
},
{
"name": "CVE-2019-8602",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8602"
},
{
"name": "CVE-2019-6237",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6237"
},
{
"name": "CVE-2019-8597",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8597"
},
{
"name": "CVE-2019-8611",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8611"
},
{
"name": "CVE-2019-8623",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8623"
},
{
"name": "CVE-2019-8622",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8622"
},
{
"name": "CVE-2019-8587",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8587"
},
{
"name": "CVE-2019-8619",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8619"
},
{
"name": "CVE-2019-8610",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8610"
},
{
"name": "CVE-2019-8628",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8628"
},
{
"name": "CVE-2019-8601",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8601"
},
{
"name": "CVE-2019-8583",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8583"
},
{
"name": "CVE-2019-8586",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8586"
},
{
"name": "CVE-2019-8594",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8594"
},
{
"name": "CVE-2019-8607",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8607"
},
{
"name": "CVE-2019-8598",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8598"
},
{
"name": "CVE-2019-8584",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8584"
}
],
"links": [],
"reference": "CERTFR-2019-AVI-269",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2019-06-14T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Apple iCloud pour\nWindows. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de\ncode arbitraire \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des\ndonn\u00e9es et une \u00e9l\u00e9vation de privil\u00e8ges.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Apple iCloud pour Windows",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210212 du 12 juin 2019",
"url": "https://support.apple.com/en-us/HT210212"
}
]
}
CERTFR-2019-AVI-241
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et une élévation de privilèges.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "AirPort Base Station microgiciel versions ant\u00e9rieures \u00e0 7.9.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iTunes pour Windows versions ant\u00e9rieures \u00e0 12.9.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iCloud pour Windows versions ant\u00e9rieures \u00e0 7.12",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2019-8575",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8575"
},
{
"name": "CVE-2019-8596",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8596"
},
{
"name": "CVE-2019-8595",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8595"
},
{
"name": "CVE-2019-8615",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8615"
},
{
"name": "CVE-2019-8609",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8609"
},
{
"name": "CVE-2019-8571",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8571"
},
{
"name": "CVE-2019-8577",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8577"
},
{
"name": "CVE-2018-6918",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-6918"
},
{
"name": "CVE-2019-8600",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8600"
},
{
"name": "CVE-2019-8588",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8588"
},
{
"name": "CVE-2019-8608",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8608"
},
{
"name": "CVE-2019-8602",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8602"
},
{
"name": "CVE-2019-7291",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7291"
},
{
"name": "CVE-2019-6237",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6237"
},
{
"name": "CVE-2019-8597",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8597"
},
{
"name": "CVE-2019-8611",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8611"
},
{
"name": "CVE-2019-8623",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8623"
},
{
"name": "CVE-2019-8622",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8622"
},
{
"name": "CVE-2019-8580",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8580"
},
{
"name": "CVE-2019-8587",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8587"
},
{
"name": "CVE-2019-8619",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8619"
},
{
"name": "CVE-2019-8610",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8610"
},
{
"name": "CVE-2019-8628",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8628"
},
{
"name": "CVE-2019-8601",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8601"
},
{
"name": "CVE-2019-8583",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8583"
},
{
"name": "CVE-2019-8572",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8572"
},
{
"name": "CVE-2019-8586",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8586"
},
{
"name": "CVE-2019-8581",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8581"
},
{
"name": "CVE-2019-8594",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8594"
},
{
"name": "CVE-2019-8607",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8607"
},
{
"name": "CVE-2019-8598",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8598"
},
{
"name": "CVE-2019-8584",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8584"
},
{
"name": "CVE-2019-8578",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8578"
}
],
"links": [],
"reference": "CERTFR-2019-AVI-241",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2019-05-29T00:00:00.000000"
},
{
"description": "Ajout du bulletin de s\u00e9curit\u00e9 Apple HT210090 du 30 mai 2019",
"revision_date": "2019-05-31T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nElles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code\narbitraire \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et\nune \u00e9l\u00e9vation de privil\u00e8ges.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210125 du 28 mai 2019",
"url": "https://support.apple.com/en-us/HT210125"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210090 du 30 mai 2019",
"url": "https://support.apple.com/en-us/HT210090"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210124 du 28 mai 2019",
"url": "https://support.apple.com/en-us/HT210124"
}
]
}
CERTFR-2019-AVI-204
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Apple | N/A | watchOS versions antérieures à 5.2.1 | ||
| Apple | macOS | macOS Mojave 10.14.4, macOS Sierra 10.12.6 et macOS High Sierra 10.13.6 sans le correctif de sécurité Security Update 2019-003 | ||
| Apple | N/A | iOS versions antérieures à 12.3 | ||
| Apple | N/A | tvOS versions antérieures à 12.3 | ||
| Apple | N/A | Apple TV Software versions antérieures à 7.3 | ||
| Apple | Safari | Safari versions antérieures à 12.1.1 |
References
| Title | Publication Time | Tags | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "watchOS versions ant\u00e9rieures \u00e0 5.2.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Mojave 10.14.4, macOS Sierra 10.12.6 et macOS High Sierra 10.13.6 sans le correctif de s\u00e9curit\u00e9 Security Update 2019-003",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS versions ant\u00e9rieures \u00e0 12.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "tvOS versions ant\u00e9rieures \u00e0 12.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple TV Software versions ant\u00e9rieures \u00e0 7.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Safari versions ant\u00e9rieures \u00e0 12.1.1",
"product": {
"name": "Safari",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2019-8620",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8620"
},
{
"name": "CVE-2019-8596",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8596"
},
{
"name": "CVE-2019-8634",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8634"
},
{
"name": "CVE-2019-8595",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8595"
},
{
"name": "CVE-2019-8615",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8615"
},
{
"name": "CVE-2019-8590",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8590"
},
{
"name": "CVE-2019-8574",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8574"
},
{
"name": "CVE-2019-8609",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8609"
},
{
"name": "CVE-2018-4456",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4456"
},
{
"name": "CVE-2019-8613",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8613"
},
{
"name": "CVE-2019-8591",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8591"
},
{
"name": "CVE-2019-8626",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8626"
},
{
"name": "CVE-2019-8576",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8576"
},
{
"name": "CVE-2019-8571",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8571"
},
{
"name": "CVE-2019-8577",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8577"
},
{
"name": "CVE-2019-8600",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8600"
},
{
"name": "CVE-2019-8635",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8635"
},
{
"name": "CVE-2019-8608",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8608"
},
{
"name": "CVE-2017-9417",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-9417"
},
{
"name": "CVE-2019-8602",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8602"
},
{
"name": "CVE-2017-14315",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-14315"
},
{
"name": "CVE-2019-8593",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8593"
},
{
"name": "CVE-2019-8569",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8569"
},
{
"name": "CVE-2019-6237",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6237"
},
{
"name": "CVE-2019-8599",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8599"
},
{
"name": "CVE-2019-8597",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8597"
},
{
"name": "CVE-2019-8611",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8611"
},
{
"name": "CVE-2019-8623",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8623"
},
{
"name": "CVE-2019-8629",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8629"
},
{
"name": "CVE-2019-8622",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8622"
},
{
"name": "CVE-2019-8637",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8637"
},
{
"name": "CVE-2019-8560",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8560"
},
{
"name": "CVE-2019-8617",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8617"
},
{
"name": "CVE-2019-8630",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8630"
},
{
"name": "CVE-2019-8585",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8585"
},
{
"name": "CVE-2019-8605",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8605"
},
{
"name": "CVE-2019-8604",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8604"
},
{
"name": "CVE-2019-8589",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8589"
},
{
"name": "CVE-2019-8587",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8587"
},
{
"name": "CVE-2019-8592",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8592"
},
{
"name": "CVE-2019-8619",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8619"
},
{
"name": "CVE-2019-8610",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8610"
},
{
"name": "CVE-2019-8628",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8628"
},
{
"name": "CVE-2019-8601",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8601"
},
{
"name": "CVE-2019-8583",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8583"
},
{
"name": "CVE-2019-8606",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8606"
},
{
"name": "CVE-2019-8603",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8603"
},
{
"name": "CVE-2019-8616",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8616"
},
{
"name": "CVE-2019-8586",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8586"
},
{
"name": "CVE-2019-8594",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8594"
},
{
"name": "CVE-2017-6975",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6975"
},
{
"name": "CVE-2019-8568",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8568"
},
{
"name": "CVE-2019-8607",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8607"
},
{
"name": "CVE-2019-8598",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8598"
},
{
"name": "CVE-2019-8584",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8584"
}
],
"links": [],
"reference": "CERTFR-2019-AVI-204",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2019-05-14T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance\net un contournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210122 du 13 mai 2019",
"url": "https://support.apple.com/en-us/HT210122"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210123 du 13 mai 2019",
"url": "https://support.apple.com/en-us/HT210123"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210120 du 13 mai 2019",
"url": "https://support.apple.com/en-us/HT210120"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210118 du 13 mai 2019",
"url": "https://support.apple.com/en-us/HT210118"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210119 du 13 mai 2019",
"url": "https://support.apple.com/en-us/HT210119"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT210121 du 13 mai 2019",
"url": "https://support.apple.com/en-us/HT210121"
}
]
}
CERTFR-2019-AVI-129
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, un déni de service et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Apple | N/A | Apple iOS versions antérieures à 12.2 | ||
| Apple | macOS | Apple macOS Mojave versions antérieures à 10.14.4 | ||
| Apple | macOS | Apple macOS High Sierra sans le correctif de sécurité 2019-002 | ||
| Apple | N/A | Apple iTunes pour Windows versions antérieures à 12.9.4 | ||
| Apple | N/A | Apple tvOS versions antérieures à 12.2 | ||
| Apple | macOS | Apple macOS Sierra sans le correctif de sécurité 2019-002 | ||
| Apple | N/A | Apple Xcode versions antérieures à 10.2 | ||
| Apple | N/A | Apple iCloud pour Windows versions antérieures à 7.1 | ||
| Apple | Safari | Apple Safari versions antérieures à 12.1 |
References
| Title | Publication Time | Tags | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Apple iOS versions ant\u00e9rieures \u00e0 12.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple macOS Mojave versions ant\u00e9rieures \u00e0 10.14.4",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple macOS High Sierra sans le correctif de s\u00e9curit\u00e9 2019-002",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple iTunes pour Windows versions ant\u00e9rieures \u00e0 12.9.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple tvOS versions ant\u00e9rieures \u00e0 12.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple macOS Sierra sans le correctif de s\u00e9curit\u00e9 2019-002",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple Xcode versions ant\u00e9rieures \u00e0 10.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple iCloud pour Windows versions ant\u00e9rieures \u00e0 7.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple Safari versions ant\u00e9rieures \u00e0 12.1",
"product": {
"name": "Safari",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2019-6222",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6222"
},
{
"name": "CVE-2019-8544",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8544"
},
{
"name": "CVE-2019-8566",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8566"
},
{
"name": "CVE-2019-8524",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8524"
},
{
"name": "CVE-2019-8518",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8518"
},
{
"name": "CVE-2018-18313",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-18313"
},
{
"name": "CVE-2019-8565",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8565"
},
{
"name": "CVE-2019-6207",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6207"
},
{
"name": "CVE-2019-8507",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8507"
},
{
"name": "CVE-2019-8523",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8523"
},
{
"name": "CVE-2019-8536",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8536"
},
{
"name": "CVE-2019-8545",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8545"
},
{
"name": "CVE-2019-8511",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8511"
},
{
"name": "CVE-2019-8561",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8561"
},
{
"name": "CVE-2019-8550",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8550"
},
{
"name": "CVE-2019-8546",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8546"
},
{
"name": "CVE-2019-8504",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8504"
},
{
"name": "CVE-2019-7286",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7286"
},
{
"name": "CVE-2019-8522",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8522"
},
{
"name": "CVE-2019-8517",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8517"
},
{
"name": "CVE-2019-8515",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8515"
},
{
"name": "CVE-2019-8562",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8562"
},
{
"name": "CVE-2019-6239",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6239"
},
{
"name": "CVE-2019-8540",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8540"
},
{
"name": "CVE-2019-8502",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8502"
},
{
"name": "CVE-2019-8526",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8526"
},
{
"name": "CVE-2019-8529",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8529"
},
{
"name": "CVE-2019-6201",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6201"
},
{
"name": "CVE-2019-8503",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8503"
},
{
"name": "CVE-2019-8549",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8549"
},
{
"name": "CVE-2018-4461",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4461"
},
{
"name": "CVE-2019-7293",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7293"
},
{
"name": "CVE-2019-8567",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8567"
},
{
"name": "CVE-2018-18311",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-18311"
},
{
"name": "CVE-2019-8563",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8563"
},
{
"name": "CVE-2019-6237",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6237"
},
{
"name": "CVE-2019-8514",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8514"
},
{
"name": "CVE-2019-8556",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8556"
},
{
"name": "CVE-2019-8513",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8513"
},
{
"name": "CVE-2019-8512",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8512"
},
{
"name": "CVE-2019-8510",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8510"
},
{
"name": "CVE-2018-12015",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-12015"
},
{
"name": "CVE-2019-8527",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8527"
},
{
"name": "CVE-2019-8516",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8516"
},
{
"name": "CVE-2019-8508",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8508"
},
{
"name": "CVE-2019-8533",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8533"
},
{
"name": "CVE-2019-8558",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8558"
},
{
"name": "CVE-2019-8530",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8530"
},
{
"name": "CVE-2019-8553",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8553"
},
{
"name": "CVE-2019-8505",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8505"
},
{
"name": "CVE-2019-8520",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8520"
},
{
"name": "CVE-2019-8506",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8506"
},
{
"name": "CVE-2019-8542",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8542"
},
{
"name": "CVE-2019-8535",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8535"
},
{
"name": "CVE-2019-7284",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7284"
},
{
"name": "CVE-2019-8555",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8555"
},
{
"name": "CVE-2019-6236",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6236"
},
{
"name": "CVE-2019-8537",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8537"
},
{
"name": "CVE-2019-7292",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7292"
},
{
"name": "CVE-2019-6204",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6204"
},
{
"name": "CVE-2019-8521",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8521"
},
{
"name": "CVE-2019-8519",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8519"
},
{
"name": "CVE-2019-8551",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8551"
},
{
"name": "CVE-2019-8541",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8541"
},
{
"name": "CVE-2019-6232",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6232"
},
{
"name": "CVE-2019-8559",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8559"
},
{
"name": "CVE-2019-8552",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8552"
},
{
"name": "CVE-2019-7285",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7285"
},
{
"name": "CVE-2019-8554",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8554"
}
],
"links": [],
"reference": "CERTFR-2019-AVI-129",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2019-03-26T00:00:00.000000"
}
],
"risks": [
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire, un d\u00e9ni de service et un contournement de\nla politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT209599 du 25 mars 2019",
"url": "https://support.apple.com/en-us/HT209599"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT209601 du 25 mars 2019",
"url": "https://support.apple.com/en-us/HT209601"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT209604 du 25 mars 2019",
"url": "https://support.apple.com/en-us/HT209604"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT209605 du 25 mars 2019",
"url": "https://support.apple.com/en-us/HT209605"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT209603 du 25 mars 2019",
"url": "https://support.apple.com/en-us/HT209603"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT209600 du 25 mars 2019",
"url": "https://support.apple.com/en-us/HT209600"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT209606 du 25 mars 2019",
"url": "https://support.apple.com/en-us/HT209606"
}
]
}
CERTFR-2019-AVI-048
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "iOS versions ant\u00e9rieures \u00e0 12.1.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "maxOS Mojave versions ant\u00e9rieures \u00e0 10.14.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Shortcuts pour iOS versions ant\u00e9rieures \u00e0 2.1.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2019-7286",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7286"
},
{
"name": "CVE-2019-7287",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7287"
},
{
"name": "CVE-2019-7290",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7290"
},
{
"name": "CVE-2019-7289",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7289"
},
{
"name": "CVE-2019-6223",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6223"
},
{
"name": "CVE-2019-7288",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7288"
}
],
"links": [],
"reference": "CERTFR-2019-AVI-048",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2019-02-08T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nElles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code\narbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la\nconfidentialit\u00e9 des donn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT209521 du 7 f\u00e9vrier 2019",
"url": "https://support.apple.com/fr-fr/HT209521"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT209522 du 7 f\u00e9vrier 2019",
"url": "https://support.apple.com/fr-fr/HT209522"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT209520 du 7 f\u00e9vrier 2019",
"url": "https://support.apple.com/kb/HT209520"
}
]
}
CERTFR-2019-AVI-032
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un contournement de la politique de sécurité et une atteinte à l'intégrité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Apple | N/A | tvOS versions antérieures à 12.1.2 | ||
| Apple | Safari | Safari versions antérieures à 12.0.3 | ||
| Apple | N/A | watchOS versions antérieures à 5.1.3 | ||
| Apple | macOS | macOS High Sierra versions antérieures à 10.13.6 | ||
| Apple | N/A | iOS versions antérieures à 12.1.3 | ||
| Apple | N/A | iCloud for Windows versions antérieures à 7.10 | ||
| Apple | macOS | macOS Mojave versions antérieures à 10.14.2 |
References
| Title | Publication Time | Tags | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "tvOS versions ant\u00e9rieures \u00e0 12.1.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Safari versions ant\u00e9rieures \u00e0 12.0.3",
"product": {
"name": "Safari",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "watchOS versions ant\u00e9rieures \u00e0 5.1.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS High Sierra versions ant\u00e9rieures \u00e0 10.13.6",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS versions ant\u00e9rieures \u00e0 12.1.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iCloud for Windows versions ant\u00e9rieures \u00e0 7.10",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Mojave versions ant\u00e9rieures \u00e0 10.14.2",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2019-6230",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6230"
},
{
"name": "CVE-2019-6227",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6227"
},
{
"name": "CVE-2019-6221",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6221"
},
{
"name": "CVE-2019-6217",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6217"
},
{
"name": "CVE-2019-6213",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6213"
},
{
"name": "CVE-2019-6214",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6214"
},
{
"name": "CVE-2018-4467",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4467"
},
{
"name": "CVE-2019-6231",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6231"
},
{
"name": "CVE-2019-6210",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6210"
},
{
"name": "CVE-2019-6234",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6234"
},
{
"name": "CVE-2019-6235",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6235"
},
{
"name": "CVE-2019-6233",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6233"
},
{
"name": "CVE-2018-20506",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-20506"
},
{
"name": "CVE-2018-20346",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-20346"
},
{
"name": "CVE-2019-6206",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6206"
},
{
"name": "CVE-2019-6228",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6228"
},
{
"name": "CVE-2019-6215",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6215"
},
{
"name": "CVE-2019-6216",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6216"
},
{
"name": "CVE-2019-6225",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6225"
},
{
"name": "CVE-2019-6229",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6229"
},
{
"name": "CVE-2019-6209",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6209"
},
{
"name": "CVE-2019-6220",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6220"
},
{
"name": "CVE-2019-6202",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6202"
},
{
"name": "CVE-2019-6219",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6219"
},
{
"name": "CVE-2019-6226",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6226"
},
{
"name": "CVE-2019-6200",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6200"
},
{
"name": "CVE-2019-6211",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6211"
},
{
"name": "CVE-2019-6218",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6218"
},
{
"name": "CVE-2019-6208",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6208"
},
{
"name": "CVE-2019-6205",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6205"
},
{
"name": "CVE-2019-6212",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6212"
},
{
"name": "CVE-2018-4452",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4452"
},
{
"name": "CVE-2019-6224",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6224"
},
{
"name": "CVE-2018-20505",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-20505"
}
],
"links": [],
"reference": "CERTFR-2019-AVI-032",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2019-01-23T00:00:00.000000"
}
],
"risks": [
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire \u00e0 distance, un contournement de la\npolitique de s\u00e9curit\u00e9 et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT209451 du 22 janvier 2019",
"url": "https://support.apple.com/en-us/HT209451"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT209447 du 22 janvier 2019",
"url": "https://support.apple.com/en-us/HT209447"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT209443 du 22 janvier 2019",
"url": "https://support.apple.com/en-us/HT209443"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT209449 du 22 janvier 2019",
"url": "https://support.apple.com/en-us/HT209449"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT209448 du 22 janvier 2019",
"url": "https://support.apple.com/en-us/HT209448"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT209446 du 22 janvier 2019",
"url": "https://support.apple.com/en-us/HT209446"
}
]
}
CERTFR-2018-AVI-586
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, un déni de service et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Apple | N/A | tvOS versions antérieures à 12.1.1 | ||
| Apple | N/A | iOS versions antérieures à 12.1.1 | ||
| Apple | N/A | iCloud pour Windows versions antérieures à 7.9 | ||
| Apple | N/A | watchOS versions antérieures à 5.1.2 | ||
| Apple | macOS | macOS High Sierra sans le correctif de sécurité 2018-003 | ||
| Apple | macOS | macOS Sierra sans le correctif de sécurité 2018-006 | ||
| Apple | N/A | iTunes pour Windows versions antérieures à 12.9.2 | ||
| Apple | N/A | Shortcuts pour iOS versions antérieures à 2.1.2 | ||
| Apple | Safari | Safari versions antérieures à 12.0.2 | ||
| Apple | macOS | macOS Mojave versions antérieures à 10.14.2 |
References
| Title | Publication Time | Tags | ||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "tvOS versions ant\u00e9rieures \u00e0 12.1.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS versions ant\u00e9rieures \u00e0 12.1.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iCloud pour Windows versions ant\u00e9rieures \u00e0 7.9",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "watchOS versions ant\u00e9rieures \u00e0 5.1.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS High Sierra sans le correctif de s\u00e9curit\u00e9 2018-003",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Sierra sans le correctif de s\u00e9curit\u00e9 2018-006",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iTunes pour Windows versions ant\u00e9rieures \u00e0 12.9.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Shortcuts pour iOS versions ant\u00e9rieures \u00e0 2.1.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Safari versions ant\u00e9rieures \u00e0 12.0.2",
"product": {
"name": "Safari",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Mojave versions ant\u00e9rieures \u00e0 10.14.2",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2018-4430",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4430"
},
{
"name": "CVE-2018-4427",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4427"
},
{
"name": "CVE-2018-4437",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4437"
},
{
"name": "CVE-2018-4440",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4440"
},
{
"name": "CVE-2018-4447",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4447"
},
{
"name": "CVE-2018-4438",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4438"
},
{
"name": "CVE-2018-4450",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4450"
},
{
"name": "CVE-2018-4449",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4449"
},
{
"name": "CVE-2018-4431",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4431"
},
{
"name": "CVE-2018-4435",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4435"
},
{
"name": "CVE-2018-4461",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4461"
},
{
"name": "CVE-2018-4463",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4463"
},
{
"name": "CVE-2018-4464",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4464"
},
{
"name": "CVE-2018-4462",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4462"
},
{
"name": "CVE-2018-4443",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4443"
},
{
"name": "CVE-2018-4441",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4441"
},
{
"name": "CVE-2018-4446",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4446"
},
{
"name": "CVE-2018-4303",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4303"
},
{
"name": "CVE-2018-4429",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4429"
},
{
"name": "CVE-2018-4465",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4465"
},
{
"name": "CVE-2018-4460",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4460"
},
{
"name": "CVE-2018-4439",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4439"
},
{
"name": "CVE-2018-4442",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4442"
},
{
"name": "CVE-2018-4436",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4436"
},
{
"name": "CVE-2018-4434",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4434"
},
{
"name": "CVE-2018-4445",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4445"
}
],
"links": [],
"reference": "CERTFR-2018-AVI-586",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2018-12-06T00:00:00.000000"
},
{
"description": "Ajout d\u0027un bulletin de s\u00e9curit\u00e9",
"revision_date": "2018-12-07T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire, un d\u00e9ni de service et un contournement de\nla politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT209342 du 5 d\u00e9cembre 2018",
"url": "https://support.apple.com/fr-fr/HT209342"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT209347 du 5 d\u00e9cembre 2018",
"url": "https://support.apple.com/fr-fr/HT209347"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT209344 du 5 d\u00e9cembre 2018",
"url": "https://support.apple.com/fr-fr/HT209344"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT209345 du 5 d\u00e9cembre 2018",
"url": "https://support.apple.com/fr-fr/HT209345"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT209340 du 5 d\u00e9cembre 2018",
"url": "https://support.apple.com/fr-fr/HT209340"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT209343 du 7 d\u00e9cembre 2018",
"url": "https://support.apple.com/fr-fr/HT209343"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT209341 du 5 d\u00e9cembre 2018",
"url": "https://support.apple.com/fr-fr/HT209341"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT209346 du 5 d\u00e9cembre 2018",
"url": "https://support.apple.com/fr-fr/HT209346"
}
]
}
CERTFR-2018-AVI-524
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Apple | Safari | Safari versions antérieures à 12.0.1 | ||
| Apple | macOS | macOS Sierra versions antérieures à 10.12.6 | ||
| Apple | N/A | iOS versions antérieures à 12.1 | ||
| Apple | N/A | watchOS versions antérieures à 5.1 | ||
| Apple | macOS | macOS High Sierra versions antérieures à 10.13.6 | ||
| Apple | N/A | tvOS versions antérieures à 12.1 | ||
| Apple | N/A | iCloud for Windows versions antérieures à 7.8 | ||
| Apple | macOS | macOS Mojave versions antérieures à 10.14 | ||
| Apple | N/A | iTunes versions antérieures à 12.9.1 |
References
| Title | Publication Time | Tags | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Safari versions ant\u00e9rieures \u00e0 12.0.1",
"product": {
"name": "Safari",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Sierra versions ant\u00e9rieures \u00e0 10.12.6",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS versions ant\u00e9rieures \u00e0 12.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "watchOS versions ant\u00e9rieures \u00e0 5.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS High Sierra versions ant\u00e9rieures \u00e0 10.13.6",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "tvOS versions ant\u00e9rieures \u00e0 12.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iCloud for Windows versions ant\u00e9rieures \u00e0 7.8",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Mojave versions ant\u00e9rieures \u00e0 10.14",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iTunes versions ant\u00e9rieures \u00e0 12.9.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2018-4310",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4310"
},
{
"name": "CVE-2017-14033",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-14033"
},
{
"name": "CVE-2018-4391",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4391"
},
{
"name": "CVE-2018-8777",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-8777"
},
{
"name": "CVE-2018-4368",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4368"
},
{
"name": "CVE-2018-4395",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4395"
},
{
"name": "CVE-2018-4425",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4425"
},
{
"name": "CVE-2018-4259",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4259"
},
{
"name": "CVE-2018-4400",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4400"
},
{
"name": "CVE-2018-4415",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4415"
},
{
"name": "CVE-2018-4427",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4427"
},
{
"name": "CVE-2018-4369",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4369"
},
{
"name": "CVE-2018-4396",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4396"
},
{
"name": "CVE-2018-4291",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4291"
},
{
"name": "CVE-2017-12618",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-12618"
},
{
"name": "CVE-2018-4374",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4374"
},
{
"name": "CVE-2017-10784",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-10784"
},
{
"name": "CVE-2018-4350",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4350"
},
{
"name": "CVE-2018-4386",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4386"
},
{
"name": "CVE-2018-4417",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4417"
},
{
"name": "CVE-2018-4331",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4331"
},
{
"name": "CVE-2018-4398",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4398"
},
{
"name": "CVE-2018-4412",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4412"
},
{
"name": "CVE-2018-4420",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4420"
},
{
"name": "CVE-2017-14064",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-14064"
},
{
"name": "CVE-2018-4392",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4392"
},
{
"name": "CVE-2018-4409",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4409"
},
{
"name": "CVE-2018-8778",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-8778"
},
{
"name": "CVE-2018-4419",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4419"
},
{
"name": "CVE-2018-4371",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4371"
},
{
"name": "CVE-2018-4348",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4348"
},
{
"name": "CVE-2018-4382",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4382"
},
{
"name": "CVE-2018-4424",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4424"
},
{
"name": "CVE-2017-12613",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-12613"
},
{
"name": "CVE-2018-4288",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4288"
},
{
"name": "CVE-2018-4203",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4203"
},
{
"name": "CVE-2017-0898",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-0898"
},
{
"name": "CVE-2018-8779",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-8779"
},
{
"name": "CVE-2018-4402",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4402"
},
{
"name": "CVE-2018-4377",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4377"
},
{
"name": "CVE-2018-4378",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4378"
},
{
"name": "CVE-2018-4341",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4341"
},
{
"name": "CVE-2018-3639",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-3639"
},
{
"name": "CVE-2018-4426",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4426"
},
{
"name": "CVE-2018-4367",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4367"
},
{
"name": "CVE-2018-4399",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4399"
},
{
"name": "CVE-2018-4342",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4342"
},
{
"name": "CVE-2018-4389",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4389"
},
{
"name": "CVE-2018-4403",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4403"
},
{
"name": "CVE-2018-4411",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4411"
},
{
"name": "CVE-2018-4408",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4408"
},
{
"name": "CVE-2018-4375",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4375"
},
{
"name": "CVE-2018-4418",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4418"
},
{
"name": "CVE-2018-4340",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4340"
},
{
"name": "CVE-2018-4394",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4394"
},
{
"name": "CVE-2018-4365",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4365"
},
{
"name": "CVE-2018-6797",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-6797"
},
{
"name": "CVE-2018-4308",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4308"
},
{
"name": "CVE-2018-4126",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4126"
},
{
"name": "CVE-2018-4376",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4376"
},
{
"name": "CVE-2017-17742",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-17742"
},
{
"name": "CVE-2018-4286",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4286"
},
{
"name": "CVE-2018-4334",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4334"
},
{
"name": "CVE-2018-4304",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4304"
},
{
"name": "CVE-2018-4393",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4393"
},
{
"name": "CVE-2018-4354",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4354"
},
{
"name": "CVE-2018-4406",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4406"
},
{
"name": "CVE-2018-4372",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4372"
},
{
"name": "CVE-2018-3646",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-3646"
},
{
"name": "CVE-2018-4287",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4287"
},
{
"name": "CVE-2018-8780",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-8780"
},
{
"name": "CVE-2018-6914",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-6914"
},
{
"name": "CVE-2018-4423",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4423"
},
{
"name": "CVE-2018-4385",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4385"
},
{
"name": "CVE-2018-4153",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4153"
},
{
"name": "CVE-2018-3640",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-3640"
},
{
"name": "CVE-2018-4388",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4388"
},
{
"name": "CVE-2018-4373",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4373"
},
{
"name": "CVE-2018-4295",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4295"
},
{
"name": "CVE-2018-4416",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4416"
},
{
"name": "CVE-2018-4366",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4366"
},
{
"name": "CVE-2018-4401",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4401"
},
{
"name": "CVE-2018-4410",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4410"
},
{
"name": "CVE-2018-4242",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4242"
},
{
"name": "CVE-2018-4384",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4384"
},
{
"name": "CVE-2018-4422",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4422"
},
{
"name": "CVE-2018-4413",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4413"
},
{
"name": "CVE-2018-4407",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4407"
},
{
"name": "CVE-2018-4346",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4346"
},
{
"name": "CVE-2017-17405",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-17405"
},
{
"name": "CVE-2018-4387",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4387"
},
{
"name": "CVE-2018-4326",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4326"
},
{
"name": "CVE-2018-4390",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4390"
}
],
"links": [],
"reference": "CERTFR-2018-AVI-524",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2018-10-31T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance\net un contournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT209192 du 30 octobre 2018",
"url": "https://support.apple.com/en-us/HT209192"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT209193 du 30 octobre 2018",
"url": "https://support.apple.com/en-us/HT209193"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT209195 du 30 octobre 2018",
"url": "https://support.apple.com/en-us/HT209195"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT209196 du 30 octobre 2018",
"url": "https://support.apple.com/en-us/HT209196"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT209197 du 30 octobre 2018",
"url": "https://support.apple.com/en-us/HT209197"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT209194 du 30 octobre 2018",
"url": "https://support.apple.com/en-us/HT209194"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT209198 du 30 octobre 2018",
"url": "https://support.apple.com/en-us/HT209198"
}
]
}
CERTFR-2018-AVI-475
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Apple iOS. Elles permettent à un attaquant de provoquer un contournement de la politique de sécurité et une atteinte à la confidentialité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneReferences
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "iOS versions 12 et ant\u00e9rieures",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2018-4379",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4379"
},
{
"name": "CVE-2018-4380",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-4380"
}
],
"links": [],
"reference": "CERTFR-2018-AVI-475",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2018-10-09T00:00:00.000000"
}
],
"risks": [
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Apple iOS. Elles\npermettent \u00e0 un attaquant de provoquer un contournement de la politique\nde s\u00e9curit\u00e9 et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Apple iOS",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT209162 du 8 octobre 2018",
"url": "https://support.apple.com/fr-fr/HT209162"
}
]
}