CVE-2018-4417

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10.14.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
n/amacOSVersions prior to: macOS Mojave 10.14

References

Timeline

Published
Apr 3, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-44185.5A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10.14.CVE-2018-44197.8A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1,CVE-2018-44207.8A memory corruption issue was addressed by removing the vulnerable code. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.CVE-2018-44217.8A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.1.CVE-2018-44228.8A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.1.CVE-2018-44237.8A logic issue was addressed with improved validation. This issue affected versions prior to macOS Mojave 10.14.1.CVE-2018-44247.8A buffer overflow was addressed with improved size validation. This issue affected versions prior to macOS Mojave 10.14.1.CVE-2018-44257.8A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOCVE-2018-44267.8A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOCVE-2018-44277.8A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to: iOS 12.1, watchOS 5.1.2, tvOS CVE-2018-44287.1A lock screen issue allowed access to the share function on a locked device. This issue was addressed by restricting options offered on a loCVE-2018-44296.5A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue affected versions prio
CVE-2018-4417: Medium severity, CVSS 5.5 | Vulnix