CVE-2018-4206

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. macOS before 10.13.4 Security Update 2018-001 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Crash Reporter" component. It allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted app that replaces a privileged port name.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/103957Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/103958Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1040744Third Party Advisory, VDB Entry
https://bugs.chromium.org/p/project-zero/issues/detail?id=1529Exploit, Third Party Advisory
https://support.apple.com/HT208742Vendor Advisory
https://support.apple.com/HT208743Vendor Advisory
https://support.apple.com/HT208850Vendor Advisory
https://support.apple.com/HT208851Vendor Advisory
https://www.exploit-db.com/exploits/44562/Exploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/103957Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/103958Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1040744Third Party Advisory, VDB Entry
https://bugs.chromium.org/p/project-zero/issues/detail?id=1529Exploit, Third Party Advisory
https://support.apple.com/HT208742Vendor Advisory
https://support.apple.com/HT208743Vendor Advisory
https://support.apple.com/HT208850Vendor Advisory
https://support.apple.com/HT208851Vendor Advisory
https://www.exploit-db.com/exploits/44562/Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Jun 8, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-42078.8In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Window CVE-2018-42088.8In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Window CVE-2018-42098.8In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Window CVE-2018-42108.8In iOS before 11.3, Safari before 11.1, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, an array indexing issue exis CVE-2018-42117.8An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affect CVE-2018-42128.8In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Window CVE-2018-42138.8In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Window CVE-2018-42148.8An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windo CVE-2018-42157.8An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Bluetooth" component. It allows atta CVE-2018-42165.5A logic issue existed in the handling of call URLs. This issue was addressed with improved state management. This issue affected versions pr CVE-2018-42177.5In macOS High Sierra before 10.13.5, a privacy issue in the handling of Open Directory records was addressed with improved indexing.CVE-2018-42188.8An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windo