CVE-2018-4121

33Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 13%

from disclosure to weapon6 days

Published on NVDApr 3

1st PoC+6d

exploitation probability

13%top 4% of all CVEs

observed exploitation

nono source reports it

5 public exploit(s)

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Affected products

n/a · n/a

public PoCs found — 5

githubgithub.com/FSecureLABS/CVE-2018-4121★ 120 githubgithub.com/likekabin/CVE-2018-4121★ 0 githubgithub.com/jezzus/CVE-2018-4121★ 0 exploitdbwww.exploit-db.com/exploits/44427unverified cve_referencewww.exploit-db.com/exploits/44427/unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

https://github.com/mwrlabs/CVE-2018-4121 https://security.gentoo.org/glsa/201808-04 https://support.apple.com/HT208693 https://support.apple.com/HT208694 https://support.apple.com/HT208695 https://support.apple.com/HT208696 https://support.apple.com/HT208697 https://support.apple.com/HT208698 https://www.exploit-db.com/exploits/44427/http://www.securitytracker.com/id/1040604