CVE-2018-4233

An issue was discovered in certain Apple products

High · published June 8, 2018

Patch now

High probability of exploitation

CVSS calls it high at 8.8. It sits in the 99.0th percentile for exploit probability.

CVSS v3.1

8.8

EPSS

54%

Percentile

99.0

In the wild

Unconfirmed

What it is

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

The record

Technical detail

CVSS v3.1: 8.8 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.53970 · 99.0th percentile
Published: 2018-06-08T18:00Z

EPSS history

Timeline

08 JUN 18:00Z
An issue was discovered in certain Apple products
cvelistv5