Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 03/04/2018 Updated: 03/10/2019

CVSS v2 Base Score: 7.6 | Impact Score: 10 | Exploitability Score: 4.9

CVSS v3 Base Score: 7 | Impact Score: 5.9 | Exploitability Score: 1

VMScore: 676

Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C

An issue exists in certain Apple products. iOS prior to 11.3 is affected. macOS prior to 10.13.4 is affected. watchOS prior to 4.3 is affected. The issue involves the "CoreFoundation" component. A race condition allows malicious users to execute arbitrary code in a privileged context via a crafted app.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple iphone os
apple mac os x
apple watchos

CWE-362 https://support.apple.com/HT208696 https://support.apple.com/HT208693 https://support.apple.com/HT208692 http://www.securitytracker.com/id/1040608 http://www.securitytracker.com/id/1040604 http://www.securityfocus.com/bid/103581 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2018-4158

Vulnerability Summary

References

Vulmon Search

About

Products

Connect