Vulnerability Description
In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Safari | < 11.1 |
| Apple | Iphone Os | < 11.3 |
| Apple | Tvos | < 11.3 |
| Apple | Watchos | < 4.3 |
| Apple | Icloud | < 7.4 |
| Apple | Itunes | < 12.7.4 |
| Microsoft | Windows | All versions |
| Canonical | Ubuntu Linux | 18.04 |
| Webkitgtk | Webkitgtk\+ | < 2.22.0 |
Related Weaknesses (CWE)
References
- https://security.gentoo.org/glsa/201812-04Third Party Advisory
- https://support.apple.com/HT208693%2C
- https://support.apple.com/HT208694%2C
- https://support.apple.com/HT208695%2C
- https://support.apple.com/HT208696Vendor Advisory
- https://support.apple.com/HT208697%2C
- https://support.apple.com/HT208698%2C
- https://usn.ubuntu.com/3781-1/Third Party Advisory
- https://security.gentoo.org/glsa/201812-04Third Party Advisory
- https://support.apple.com/HT208693%2C
- https://support.apple.com/HT208694%2C
- https://support.apple.com/HT208695%2C
- https://support.apple.com/HT208696Vendor Advisory
- https://support.apple.com/HT208697%2C
- https://support.apple.com/HT208698%2C
FAQ
What is CVE-2018-4208?
CVE-2018-4208 is a vulnerability with a CVSS score of 8.8 (HIGH). In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This iss...
How severe is CVE-2018-4208?
CVE-2018-4208 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-4208?
Check the references section above for vendor advisories and patch information. Affected products include: Apple Safari, Apple Iphone Os, Apple Tvos, Apple Watchos, Apple Icloud.