Vulnerability Description
In iOS before 11.3, Safari before 11.1, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, an array indexing issue existed in the handling of a function in javascript core. This issue was addressed with improved checks.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Safari | < 11.1 |
| Apple | Iphone Os | < 11.3 |
| Apple | Tvos | < 11.3 |
| Apple | Watchos | < 4.3 |
| Apple | Itunes | < 12.7.4 |
| Microsoft | Windows | All versions |
| Canonical | Ubuntu Linux | 18.04 |
| Webkitgtk | Webkitgtk\+ | < 2.22.0 |
Related Weaknesses (CWE)
References
- https://security.gentoo.org/glsa/201812-04Third Party Advisory
- https://support.apple.com/HT208693%2C
- https://support.apple.com/HT208694%2C
- https://support.apple.com/HT208695%2C
- https://support.apple.com/HT208698Vendor Advisory
- https://usn.ubuntu.com/3781-1/Third Party Advisory
- https://security.gentoo.org/glsa/201812-04Third Party Advisory
- https://support.apple.com/HT208693%2C
- https://support.apple.com/HT208694%2C
- https://support.apple.com/HT208695%2C
- https://support.apple.com/HT208698Vendor Advisory
- https://usn.ubuntu.com/3781-1/Third Party Advisory
FAQ
What is CVE-2018-4210?
CVE-2018-4210 is a vulnerability with a CVSS score of 8.8 (HIGH). In iOS before 11.3, Safari before 11.1, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, an array indexing issue existed in the handling of a function in javascript core. This i...
How severe is CVE-2018-4210?
CVE-2018-4210 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-4210?
Check the references section above for vendor advisories and patch information. Affected products include: Apple Safari, Apple Iphone Os, Apple Tvos, Apple Watchos, Apple Itunes.