CVE-2018-4237 — Vulnetix

CVE-2018-4237 PUBLISHED CVSS 6.800000190734863 MEDIUM

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "libxpc" component. It allows attackers to gain privileges via a crafted app that leverages a logic error.

EPSS 62.95% · 98.4th percentile

Risk Scores

CVSS 2.0

6.800000190734863

EPSS Score

62.95%

98.4th percentile

Affected Products

Vendor	Product	Versions
n/a	n/a	*
apple	mac_os_x	0, 0
apple	tvos	0, 0
apple	iphone_os	0, 0
apple	watchos	0, 0

Exploit Intelligence

https://www.exploit-db.com/exploits/45916/ (nist-nvd)
CIRCL seen: CVE-2018-4237 (circl-sighting)
CIRCL exploited: CVE-2018-4237 (circl-sighting)
CIRCL seen: CVE-2018-4237 (circl-sighting)
CIRCL seen: CVE-2018-4237 (circl-sighting)
CIRCL seen: CVE-2018-4237 (circl-sighting)
CIRCL seen: CVE-2018-4237 (circl-sighting)
https://support.apple.com/HT208849 (circl)
https://support.apple.com/HT208848 (circl)
https://support.apple.com/HT208850 (circl)

…and 8 more exploits

Timeline

Jun 1, 2018 CVE Published
Nov 27, 2018 PoC Published
Nov 28, 2018 PoC Published
Nov 29, 2018 PoC Published
Apr 14, 2021 EPSS Score
Jun 23, 2021 EPSS Score
Sep 14, 2021 EPSS Score
Sep 16, 2021 EPSS Score
Dec 27, 2021 EPSS Score
Feb 4, 2022 EPSS Score
Feb 28, 2022 EPSS Score
Jul 3, 2022 EPSS Score

References

https://support.apple.com/HT208850 url
https://support.apple.com/HT208851 url
https://www.exploit-db.com/exploits/45916 url
http://www.securitytracker.com/id/1041027 url
https://support.apple.com/HT208848 advisory
https://support.apple.com/HT208849 advisory
https://www.exploit-db.com/exploits/45916/ exploit
https://support.apple.com/en-gb/HT208854 advisory
https://support.apple.com/en-gb/HT208849 advisory
https://support.apple.com/en-gb/HT208853 advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-4237 advisory

Open in Interactive Console →