Home

CVE-2018-4088

Description

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. Safari before 11.0.3 is affected. iCloud before 7.3 on Windows is affected. iTunes before 12.7.3 on Windows is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the WebKit component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Risk Information

Base Score
8.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.638

Associated Vulnerability

VulnerabilityOS Platform
Update for iCloud (7.3.0.20)Windows
iCloud 7.3.0.20Windows
Vulnerabilities CVE-2018-4088,CVE-2018-4096,CVE-2018-4147 are affected in Apple iTunes (X64) 12.7.2Windows
Vulnerabilities CVE-2018-4088,CVE-2018-4096,CVE-2018-4147 are affected in Apple iTunes 12.7.2Windows
Multiple vulnerabilities are fixed in macOS High Sierra 10.13.3Mac
Multiple vulnerabilities are fixed in macOS High Sierra 10.13.3 Combo UpdateMac
Vulnerabilities CVE-2018-4088,CVE-2018-4089,CVE-2018-4096 are affected in Apple Safari 11.0.2Mac
Vulnerabilities CVE-2018-4088,CVE-2018-4089,CVE-2018-4096,CVE-2018-4147 are affected in Apple Safari for MAC 11.0.2Mac
Vulnerabilities CVE-2018-4088,CVE-2018-4096,CVE-2018-4147 are affected in Apple iTunes For Mac 12.7.2Mac

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-307046Update for iCloud (7.3.0.20)
PATCH-316162iCloud (7.21.0.23) (Deployment-Only)
PATCH-601562macOS High Sierra 10.13.6 - Reboot Automatically
PATCH-601563macOS High Sierra 10.13.6 Combo Update - Reboot Automatically
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234