Skip to content

CVE-2018-4162 An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. t...

HighCVSS 8.8 EPSS 37.8% Framework module
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Affected products

ProductAffected versionsFixed in
debian/webkit2gtk(Debian:12) < 2.20.0-2 2.20.0-2
debian/webkit2gtk(Debian:13) < 2.20.0-2 2.20.0-2
debian/webkit2gtk(Debian:14) < 2.20.0-2 2.20.0-2
apple Safari < 11.1 11.1
apple iphone os < 11.3 11.3
apple tvOS < 11.3 11.3
apple watchOS < 4.3 4.3
apple icloud < 7.4 7.4
apple itunes < 12.7.4 12.7.4
Canonical Ubuntu Linux = 16.04 No fix listed
Canonical Ubuntu Linux = 17.10 No fix listed
webkitgtk+ < 2.20.4 2.20.4
ubuntu/qtwebkit-opensource-src(Ubuntu:24.04) All versions No fix listed
ubuntu/qtwebkit-opensource-src(Ubuntu:22.04) All versions No fix listed

References