Apple Watch 安全更新：WebKit RCE及内核提权漏洞修复

Released: December 6, 2018 Available for: Apple Watch Series 1 and later Vulnerabilities Summary Airport Impact: Malicious app can elevate privileges Description: Memory handling issue fixed CVE: CVE-2018-4303 Researcher: Mohamed Ghannam (@_simo36) Disk Images Impact: App can execute code with kernel privileges Description: Memory handling issue fixed CVE: CVE-2018-4427 Researcher: Pangu Team Kernel Impact: Local user can read kernel memory Description: Memory handling issue fixed CVE: CVE-2018-4431 Researcher: Independent security researcher via Beyond Security's SecuriTeam Secure Disclosure program Kernel Impact: DoS by attacker Description: Vulnerable code removed CVE: CVE-2018-4460 Researcher: Kevin Backhouse of Semmle Security Research Team LinkPresentation Impact: Malicious email can spoof UI Description: URL handling issue fixed with input validation CVE: CVE-2018-4429 Researcher: Victor Le Pochat of imec-DistriNet, KU Leuven Profiles Impact: Untrusted profile shown as verified Description: Certificate issue fixed with additional checks CVE: CVE-2018-4436 Researchers: James Seeley @Code4iOS, Joseph S. of JJS Securities WebKit Impact: Malicious web content can lead to code execution Description: Multiple memory issue fixed CVEs: CVE-2018-4437, CVE-2018-4464 Researchers: HyungSeok Han, DongHyeon Oh, and Sang Kil Cha of KAIST Softsec Lab, Korea CVEs: CVE-2018-4441, CVE-2018-4442, CVE-2018-4443 Researcher: lokihardt of Google Project Zero WebKit (Logic Issue) Impact: Malicious web content can lead to code execution Description: Logic issue leading to memory corruption fixed CVE: CVE-2018-4438 Researchers: Lokihardt of Google Project Zero, Qixun Zhao of Qihoo 360 Vulcan Team

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

Apple Watch 安全更新：WebKit RCE及内核提权漏洞修复

目标达成感谢每一位支持者 — 我们达成了 100% 目标！