CVE-2018-4391 PUBLISHED CVSS 5.5 MEDIUM

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan, watchOS 4.3, iOS 12.1. Processing a maliciously crafted text message may lead to UI spoofing.

EPSS 0.23% · 45.8th percentile

Risk Scores

CVSS v3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
EPSS Score
0.23%
45.8th percentile

Affected Products

VendorProductVersions
applewatchos0
ApplemacOSunspecified, unspecified, unspecified
applemac_os_x10.13
appleiphone_os0

Timeline

References

Open in Interactive Console →