VulnerabilityModified
CVE-2018-4303
An input validation issue was addressed with improved input validation.
HIGH 7.8EPSS 0.92%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.92%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
An input validation issue was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14, iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.
- CVSS 3.0
- 7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- EPSS
- 0.92% probability · 58th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- apple/iphone os · apple/mac os x · apple/tvos · apple/watchos
- Source
- product-security@apple.com
References
- https://support.apple.com/kb/HT209340Vendor Advisory
- https://support.apple.com/kb/HT209341Vendor Advisory
- https://support.apple.com/kb/HT209342Vendor Advisory
- https://support.apple.com/kb/HT209343Vendor Advisory
- https://support.apple.com/kb/HT209340Vendor Advisory
- https://support.apple.com/kb/HT209341Vendor Advisory
- https://support.apple.com/kb/HT209342Vendor Advisory
- https://support.apple.com/kb/HT209343Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.