DEBIAN-CVE-2018-4278

DEBIAN-CVE-2018-4278 PUBLISHED CVSS 4.300000190734863 MEDIUM

In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, sound fetched through audio elements may be exfiltrated cross-origin. This issue was addressed with improved audio taint tracking.

Risk Scores

CVSS v3.0

4.300000190734863

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected Products

Vendor	Product	Versions
Debian:11	webkit2gtk	0, 0, 0
Debian:13	webkit2gtk	0, 0, 0
Debian:14	webkit2gtk	0, 0, 0
Debian:12	webkit2gtk	0, 0, 0

Timeline

Jan 11, 2019 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2018-4278 advisory

Open in Interactive Console →