CVE-2018-4086 PUBLISHED CVSS 5.900000095367432 MEDIUM

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Security" component. It allows remote attackers to spoof certificate validation via crafted name constraints.

EPSS 0.33% · 55.4th percentile

Risk Scores

CVSS v3.0
5.900000095367432
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS Score
0.33%
55.4th percentile

Affected Products

VendorProductVersions
appleiphone_os0
applewatchos0
appleapple_tv0
n/an/an/a
applemac_os_x0

Timeline

References

Open in Interactive Console →