HIGH

CVE-2018-4192

CVSS v3

7.5

HIGH

EPSS Score

28.9%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code via a crafted web site that leverages a race condition.

Technical details

Published
6/8/2018
Exploit-DB
EDB-45048

Frequently asked questions

What is CVE-2018-4192?

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code via a crafted web site that leverages a race condition.

Is CVE-2018-4192 actively exploited?

Active exploitation of CVE-2018-4192 has not been confirmed. The EPSS score is 28.9%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2018-4192?

CVE-2018-4192 has a CVSS v3 base score of 7.5 (HIGH severity).

Is CVE-2018-4192 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.