CVE-2018-4192
high · 7.5An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code via a crafted web site that leverages a race condition.
7.5
CVSS
12.3%
EPSS (exploit prob.)
96th
EPSS percentile
2018-06-08
Published
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-362
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| apple | safari | < 11.1.1 |
| apple | iphone_os | < 11.4 |
| apple | tvos | < 11.4 |
| apple | watchos | < 4.3.1 |
| apple | icloud | < 7.5 |
| microsoft | windows | all versions |
| apple | itunes | < 12.7.5 |
| microsoft | windows | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://www.securitytracker.com/id/1041029
- https://security.gentoo.org/glsa/201808-04
- https://support.apple.com/HT208848
- https://support.apple.com/HT208850
- https://support.apple.com/HT208851
- https://support.apple.com/HT208852
- https://support.apple.com/HT208853
- https://support.apple.com/HT208854
- https://www.exploit-db.com/exploits/45048/
- http://www.securitytracker.com/id/1041029
- https://security.gentoo.org/glsa/201808-04
- https://support.apple.com/HT208848
- https://support.apple.com/HT208850
- https://support.apple.com/HT208851
- https://support.apple.com/HT208852
- https://support.apple.com/HT208853
- https://support.apple.com/HT208854
- https://www.exploit-db.com/exploits/45048/
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2018-4192