CVE-2018-4374

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A logic issue was addressed with improved validation. This issue affected versions prior to iOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.

Metrics

CVSS 3.0 6.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	iOS, watchOS, Safari, iTunes for Windows, iCloud for Windows	Versions prior to: iOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8

References

https://support.apple.com/kb/HT209192Vendor Advisory
https://support.apple.com/kb/HT209195Vendor Advisory
https://support.apple.com/kb/HT209196Vendor Advisory
https://support.apple.com/kb/HT209197Vendor Advisory
https://support.apple.com/kb/HT209198Vendor Advisory
https://support.apple.com/kb/HT209192Vendor Advisory
https://support.apple.com/kb/HT209195Vendor Advisory
https://support.apple.com/kb/HT209196Vendor Advisory
https://support.apple.com/kb/HT209197Vendor Advisory
https://support.apple.com/kb/HT209198Vendor Advisory

Timeline

Published: Apr 3, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-43758.8Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, watchOS 5.1,CVE-2018-43768.8Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, watchOS 5.1,CVE-2018-43776.1A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affected versions prior to CVE-2018-43788.8A memory corruption issue was addressed with improved validation. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Sa CVE-2018-43795.5A lock screen issue allowed access to the share function on a locked device. This issue was addressed by restricting options offered on a lo CVE-2018-43805.5A lock screen issue allowed access to photos and contacts on a locked device. This issue was addressed by restricting options offered on a l CVE-2018-43815.5A resource exhaustion issue was addressed with improved input validation. This issue is fixed in tvOS 12.1, iOS 12.1. Processing a malicious CVE-2018-43828.8Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, w CVE-2018-43837.8A memory corruption issue was addressed with improved state management. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tv CVE-2018-43847.8A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1, watchOS 5.1.CVE-2018-43856.5A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.CVE-2018-43868.8Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, w