CVE-2018-4237 An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the...
HighCVSS 7.8
EPSS 13.5%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "libxpc" component. It allows attackers to gain privileges via a crafted app that leverages a logic error.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple iphone os | < 11.4 | 11.4 |
| apple mac os x | < 10.13.5 | 10.13.5 |
| apple tvOS | < 11.4 | 11.4 |
| apple watchOS | < 4.3.1 | 4.3.1 |
References
- 1041027 third-party-advisory vdb-entry
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory
- 45916 exploit third-party-advisory vdb-entry