VDB

CVE-2018-4278

CVE-2018-4278 PUBLISHED CVSS 4.300000190734863 MEDIUM

In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, sound fetched through audio elements may be exfiltrated cross-origin. This issue was addressed with improved audio taint tracking.

EPSS 2.28% · 82.4th percentile

Risk Scores

CVSS 3.0
4.300000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
EPSS Score
2.28%
82.4th percentile

Affected Products

VendorProductVersions
Ubuntu:22.04:LTSqtwebkit-opensource-src5.212.0~alpha4-14build1, 5.212.0~alpha4-14, 5.212.0~alpha4-12
Ubuntu:24.04:LTSqtwebkit-opensource-src*, 0, 5.212.0~alpha4-33
Ubuntu:16.04:LTSqtwebkit-source0, 2.3.2-0ubuntu10, 2.3.2-0ubuntu11
Ubuntu:18.04:LTSqtwebkit-source0, 2.3.2-0ubuntu13
Ubuntu:18.04:LTSwebkit2gtk2.20.0-2, 2.18.2-1, 2.18.4-1
Ubuntu:16.04:LTSqtwebkit-opensource-src5.5.1+dfsg-2ubuntu1, 5.4.2+dfsg-1ubuntu2.1, 0
Ubuntu:18.04:LTSqtwebkit-opensource-src0, 5.9.1+dfsg-5ubuntu1, *
Ubuntu:18.04:LTSwebkitgtk2.4.11-3, 0, 2.4.11-3ubuntu2
Ubuntu:16.04:LTSwebkitgtk2.4.11-0ubuntu0.1, 2.4.10-0ubuntu1, 2.4.9-2ubuntu2
Ubuntu:20.04:LTSqtwebkit-opensource-src5.212.0~alpha4-1, 5.212.0~alpha3-7, 5.212.0~alpha3-6
Ubuntu:16.04:LTSwebkit2gtk2.16.6-0ubuntu0.16.04.1, 2.18.0-0ubuntu0.16.04.2, 2.18.3-0ubuntu0.16.04.1

Timeline

  • Jul 9, 2018 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 25, 2021 EPSS Score
  • Dec 29, 2021 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Mar 2, 2022 EPSS Score
  • May 4, 2022 EPSS Score
  • Jul 6, 2022 EPSS Score
  • Sep 7, 2022 EPSS Score
  • Jan 11, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›