CVEvulnerability
CVE-2018-4360
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-04-03
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
Affected configurations
• apple safari (< 12)
• apple iphone os (< 12.0)
• apple tvos (< 12)
• apple icloud (< 7.7)
• apple itunes (< 12.9)
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- https://devcraft.io/2019/02/19/cve-2018-4360-webkit-information-leakage-with-dommatrixinvertself.html devcraft.io
- https://github.com/WebKit/webkit/commit/a0b0e01648892b0bb60a01aca619eec85eb27f7a github.com
- https://support.apple.com/kb/HT209106 Vendor Advisory
- https://support.apple.com/kb/HT209107 Vendor Advisory
- https://support.apple.com/kb/HT209109 Vendor Advisory
- https://support.apple.com/kb/HT209140 Vendor Advisory
- https://support.apple.com/kb/HT209141 Vendor Advisory
- https://devcraft.io/2019/02/19/cve-2018-4360-webkit-information-leakage-with-dommatrixinvertself.html devcraft.io
- https://github.com/WebKit/webkit/commit/a0b0e01648892b0bb60a01aca619eec85eb27f7a github.com
- https://support.apple.com/kb/HT209106 Vendor Advisory
- https://support.apple.com/kb/HT209107 Vendor Advisory
- https://support.apple.com/kb/HT209109 Vendor Advisory
- https://support.apple.com/kb/HT209140 Vendor Advisory
- https://support.apple.com/kb/HT209141 Vendor Advisory