VDB

CVE-2018-4386

CVE-2018-4386 PUBLISHED CVSS 8.800000190734863 HIGH

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.

EPSS 6.49% · 93.4th percentile

Risk Scores

CVSS 3.0
8.800000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
6.49%
93.4th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSqtwebkit-source2.3.2-0ubuntu13, 0
Ubuntu:16.04:LTSwebkitgtk2.4.11-0ubuntu0.1, 2.4.9-2ubuntu2, 2.4.10-0ubuntu1
Ubuntu:16.04:LTSqtwebkit-source2.3.2-0ubuntu10, 2.3.2-0ubuntu11, 0
Ubuntu:24.04:LTSqtwebkit-opensource-src5.212.0~alpha4-34ubuntu4, 5.212.0~alpha4-36, *
Ubuntu:16.04:LTSqtwebkit-opensource-src5.5.1+dfsg-2ubuntu1, 5.4.2+dfsg-1ubuntu2.1, 0
Ubuntu:20.04:LTSqtwebkit-opensource-src*, 5.212.0~alpha4-1ubuntu2.1, 0
Ubuntu:18.04:LTSwebkit2gtk2.22.2-0ubuntu0.18.04.2, 0, 2.18.0-2
Ubuntu:22.04:LTSqtwebkit-opensource-src*, 5.212.0~alpha4-15ubuntu1, 5.212.0~alpha4-14ubuntu2
Ubuntu:16.04:LTSwebkit2gtk2.20.3-0ubuntu0.16.04.1, 2.8.5+dfsg1-3, 2.10.3+dfsg1-1
Ubuntu:18.04:LTSwebkitgtk2.4.11-3ubuntu3, 2.4.11-3ubuntu2, 2.4.11-3
Ubuntu:18.04:LTSqtwebkit-opensource-src0, 5.9.1+dfsg-5ubuntu1, 5.9.1+dfsg-5ubuntu3

Timeline

  • Aug 8, 2018 VulnCheck XDB Entry
  • Oct 31, 2018 CVE Published
  • Nov 29, 2018 PoC Published
  • Nov 30, 2018 PoC Published
  • Jan 8, 2020 PoC Published
  • Apr 14, 2021 EPSS Score
  • Aug 25, 2021 EPSS Score
  • Oct 27, 2021 EPSS Score
  • Feb 4, 2022 EPSS Score
  • May 3, 2022 EPSS Score
  • Sep 7, 2022 EPSS Score
  • Nov 9, 2022 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›