{"id":"CVE-2018-4321","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-4321","generatedAt":"2026-10-28T23:56:02.864Z","title":"A validation issue existed in the entitlement verification.","description":"A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12.","published":"2019-04-03T18:29:08.000Z","lastModified":"2026-06-17T01:58:47.000Z","status":"Modified","sourceIdentifier":"product-security@apple.com","cvss":{"version":"3.0","score":5.3,"severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},"cwe":["CWE-20"],"affected":["apple/iphone os","apple/mac os x","apple/tvos"],"epss":{"score":0.01315,"percentile":0.70582,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (1.31%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://support.apple.com/kb/HT209106","tags":["Vendor Advisory"],"source":"product-security@apple.com"},{"url":"https://support.apple.com/kb/HT209107","tags":["Vendor Advisory"],"source":"product-security@apple.com"},{"url":"https://support.apple.com/kb/HT209139","tags":["Vendor Advisory"],"source":"product-security@apple.com"},{"url":"https://support.apple.com/kb/HT209106","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/kb/HT209107","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/kb/HT209139","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-4321","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}