CVE-2018-4133

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

An issue was discovered in certain Apple products. Safari before 11.1 is affected. The issue involves the "WebKit" component. A Safari cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

Metrics

CVSS 3.0 6.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/103580Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1040606Third Party Advisory, VDB Entry
https://security.gentoo.org/glsa/201808-04Third Party Advisory
https://support.apple.com/HT208695Vendor Advisory
https://usn.ubuntu.com/3635-1/Third Party Advisory
http://www.securityfocus.com/bid/103580Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1040606Third Party Advisory, VDB Entry
https://security.gentoo.org/glsa/201808-04Third Party Advisory
https://support.apple.com/HT208695Vendor Advisory
https://usn.ubuntu.com/3635-1/Third Party Advisory

Timeline

Published: Apr 3, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-41348.8An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Safari" component. It allows remote CVE-2018-41357.8An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "IOFireWireFamily" component. It CVE-2018-41367.8An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Kernel" component. It allows at CVE-2018-41377.5An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. The issue involves the "Safa CVE-2018-41385.5An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "NVIDIA Graphics Drivers" compon CVE-2018-41397.8An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "kext tools" component. It allow CVE-2018-41407.5An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Telephony" component. It allows remo CVE-2018-41415.5An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Intel Graphics Driver" componen CVE-2018-41427.5An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. tvOS before 11.3 is affect CVE-2018-41437.8An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. tvOS before 11.3 is affect CVE-2018-41447.8An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. iCloud before 7.4 on Windo CVE-2018-41458.8Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.3, tvOS 11.3, w