CVE-2018-4191
Apple Security Advisory 2018-10-30-12
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
A memory corruption issue was addressed with improved validation. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
Un problema de corrupción de memoria se abordó con una validación mejorada. El problema afectaba a iOS en versiones anteriores a la 12, tvOS en versiones anteriores a la 12, watchOS en versiones anteriores a la 5, Safari en versiones anteriores a la 12, iTunes para Windows en versiones anteriores a la 12.9,y iCloud para Windows en versiones anteriores a la 7.7.
A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2018-01-02 CVE Reserved
- 2018-09-25 CVE Published
- 2024-08-05 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (6)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://support.apple.com/kb/HT209106 | 2019-04-04 | |
| https://support.apple.com/kb/HT209107 | 2019-04-04 | |
| https://support.apple.com/kb/HT209108 | 2019-04-04 | |
| https://support.apple.com/kb/HT209109 | 2019-04-04 | |
| https://support.apple.com/kb/HT209140 | 2019-04-04 | |
| https://support.apple.com/kb/HT209141 | 2019-04-04 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Apple Search vendor "Apple" | Icloud Search vendor "Apple" for product "Icloud" | < 7.7 Search vendor "Apple" for product "Icloud" and version " < 7.7" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
| Apple Search vendor "Apple" | Itunes Search vendor "Apple" for product "Itunes" | < 12.9 Search vendor "Apple" for product "Itunes" and version " < 12.9" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
| Apple Search vendor "Apple" | Safari Search vendor "Apple" for product "Safari" | < 12 Search vendor "Apple" for product "Safari" and version " < 12" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Iphone Os Search vendor "Apple" for product "Iphone Os" | < 12.0 Search vendor "Apple" for product "Iphone Os" and version " < 12.0" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Tvos Search vendor "Apple" for product "Tvos" | < 12 Search vendor "Apple" for product "Tvos" and version " < 12" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Watchos Search vendor "Apple" for product "Watchos" | < 5.0 Search vendor "Apple" for product "Watchos" and version " < 5.0" | - |
Affected
| ||||||