CVE-2018-4277

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In iOS before 11.4.1, watchOS before 4.3.2, tvOS before 11.4.1, Safari before 11.1.1, macOS High Sierra before 10.13.6, a spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Jan 11, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-42784.3In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, sound fetchedCVE-2018-42795.3An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to Safari 11.1.2.CVE-2018-42807.8A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 1CVE-2018-42819.8In SwiftNIO before 1.8.0, a buffer overflow was addressed with improved size validation.CVE-2018-42825.5An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issCVE-2018-42835.5An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issCVE-2018-42848.8A type confusion issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4CVE-2018-42857.8A type confusion issue was addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.CVE-2018-42869.8Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.1CVE-2018-42879.8Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.1CVE-2018-42889.8Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.1CVE-2018-42895.5An information disclosure issue was addressed by removing the vulnerable code. This issue affected versions prior to macOS High Sierra 10.13
CVE-2018-4277: High severity, CVSS 7.5 | Vulnix