CVE-2018-4436

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A certificate validation issue existed in configuration profiles. This was addressed with additional checks. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-295

Affected software

No affected versions have been published.

Timeline

Published
Apr 3, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-44378.8Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.CVE-2018-44388.8A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue affected versions prior CVE-2018-44396.5A logic issue was addressed with improved validation. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2, iTunes 12.9.2 for WinCVE-2018-44404.3A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2, iTunes 12.9.2 fCVE-2018-44418.8A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOCVE-2018-44428.8A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOCVE-2018-44438.8A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOCVE-2018-44446.5A logic issue was addressed with improved state management. This issue is fixed in Safari 12.0.2, iOS 12.1.1, tvOS 12.1.1, iTunes 12.9.2 forCVE-2018-44454.3"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue affected versionCVE-2018-44463.3This issue was addressed with improved entitlements. This issue affected versions prior to iOS 12.1.1.CVE-2018-44477.8A memory corruption issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14CVE-2018-44485.5A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019
CVE-2018-4436: High severity, CVSS 7.5 | Vulnix