Published: 08/06/2018 Updated: 13/07/2018

CVSS v2 Base Score: 7.6 | Impact Score: 10 | Exploitability Score: 4.9

CVSS v3 Base Score: 7 | Impact Score: 5.9 | Exploitability Score: 1

VMScore: 765

Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C

An issue exists in certain Apple products. macOS prior to 10.13.5 is affected. The issue involves the "NVIDIA Graphics Drivers" component. It allows malicious users to execute arbitrary code in a privileged context via a crafted app that triggers a SetAppSupportBits use-after-free because of a race condition.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple mac os x

/* nvDevice::SetAppSupportBits is external method 0x107 of the nvAccelerator IOService It calls task_deallocate without locking Two threads can race calling this external method to drop two task references when only one is held Note that the repro forks a child which give the nvAccelerator a different task otherwise the repro is more likely to ...

Full Disclosure mailing list archives   By Date By Thread </form>    APPLE-SA-2018-7-23-2 Additional information for APPLE-SA-2018-06-01-1 macOS High Sierra 10135, Security Update 2018-0 ...

CWE-362 https://support.apple.com/HT208849 https://bugs.chromium.org/p/project-zero/issues/detail?id=1549 https://www.exploit-db.com/exploits/44847/http://www.securitytracker.com/id/1041027 https://nvd.nist.gov https://www.exploit-db.com/exploits/44847/

CVE-2018-4230

Vulnerability Summary

Exploits

Mailing Lists

References

Vulmon Search

About

Products

Connect