VulnerabilityModified
CVE-2018-4391
Processing a maliciously crafted text message may lead to UI spoofing.
MEDIUM 5.5EPSS 0.87%
Does this matter?
Lower severity and a low EPSS score (0.87%). Track it; it rarely justifies an emergency change on its own.
Description
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan, watchOS 4.3, iOS 12.1. Processing a maliciously crafted text message may lead to UI spoofing.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- EPSS
- 0.87% probability · 57th percentile
- CISA KEV
- Not listed
- Affected
- apple/iphone os · apple/mac os x · apple/watchos
- Source
- product-security@apple.com
References
- https://support.apple.com/en-us/HT208221Vendor Advisory
- https://support.apple.com/en-us/HT208696Vendor Advisory
- https://support.apple.com/en-us/HT209192Vendor Advisory
- https://support.apple.com/en-us/HT208221Vendor Advisory
- https://support.apple.com/en-us/HT208696Vendor Advisory
- https://support.apple.com/en-us/HT209192Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.