CVE-2018-4444

EPSS 1.1%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 1.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

27 Oct 2020Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A logic issue was addressed with improved state management. This issue is fixed in Safari 12.0.2, iOS 12.1.1, tvOS 12.1.1, iTunes 12.9.2 for Windows. Processing maliciously crafted web content may disclose sensitive user information.

Affected products

Apple · iOS Apple · iTunes for Windows Apple · Safari Apple · tvOS

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://support.apple.com/en-us/HT209340 https://support.apple.com/en-us/HT209342 https://support.apple.com/en-us/HT209344 https://support.apple.com/en-us/HT209345