DEBIAN-CVE-2018-4096

DEBIAN-CVE-2018-4096 PUBLISHED CVSS 8.800000190734863 HIGH

Record from OSV · Published April 3, 2018

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. Safari before 11.0.3 is affected. iCloud before 7.3 on Windows is affected. iTunes before 12.7.3 on Windows is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

Package	Ecosystem	Fixed in
webkit2gtk	Debian:12	2.18.6-1
webkit2gtk	Debian:14	2.18.6-1
webkit2gtk	Debian:13	2.18.6-1

Risk scores

CVSS 3.0

8.800000190734863

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Vendor	Product	Versions
Debian:12	webkit2gtk	0
Debian:14	webkit2gtk	0
Debian:13	webkit2gtk	0

Timeline

Apr 3, 2018 CVE Published
Oct 23, 2026 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln DEBIAN-CVE-2018-4096
vulnetix vdb fixes DEBIAN-CVE-2018-4096

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/DEBIAN-CVE-2018-4096/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

https://security-tracker.debian.org/tracker/CVE-2018-4096 advisory

Look up in the Resolve Platform →