← back
CVE-2018-4448

CVE-2018-4448

EPSS 0.3%
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
27 Oct 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra, iOS 12.1.1, watchOS 5.1.2, macOS Mojave 10.14.2, Security Update 2018-003 High Sierra, Security Update 2018-006 Sierra, tvOS 12.1.1. A local user may be able to read kernel memory.
Affected products
Apple · iOSApple · macOS
References
https://support.apple.com/en-us/HT209340https://support.apple.com/en-us/HT209341https://support.apple.com/en-us/HT209342https://support.apple.com/en-us/HT209343https://support.apple.com/en-us/HT209600