CVE-2018-4115 An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves CFPre...
CriticalCVSS 9.8
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves CFPreferences in the "System Preferences" component. It allows attackers to bypass intended access restrictions by leveraging incorrect configuration-profile persistence.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple iphone os | < 11.3 | 11.3 |
| apple mac os x | < 10.13.4 | 10.13.4 |
| apple tvOS | < 11.3 | 11.3 |
| apple watchOS | < 4.3 | 4.3 |
References
- 1040604 third-party-advisory vdb-entry
- 1040608 third-party-advisory vdb-entry
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory