CVEvulnerability
CVE-2018-4399
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-04-03
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.5 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-20
Description
An access issue existed with privileged API calls. This issue was addressed with additional restrictions. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
Affected configurations
• apple iphone os (< 12.0)
• apple mac os x (< 10.14)
• apple tvos (< 12)
• apple watchos (< 5.0)
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- https://support.apple.com/kb/HT209106 Vendor Advisory
- https://support.apple.com/kb/HT209107 Vendor Advisory
- https://support.apple.com/kb/HT209108 Vendor Advisory
- https://support.apple.com/kb/HT209139 Vendor Advisory
- https://support.apple.com/kb/HT209193 Vendor Advisory
- https://support.apple.com/kb/HT209106 Vendor Advisory
- https://support.apple.com/kb/HT209107 Vendor Advisory
- https://support.apple.com/kb/HT209108 Vendor Advisory
- https://support.apple.com/kb/HT209139 Vendor Advisory
- https://support.apple.com/kb/HT209193 Vendor Advisory