CVE-2018-4210: In iOS before 11.3, Safari before 11.1, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, an array indexing issue existed in the handling of a function in…

Description

In iOS before 11.3, Safari before 11.1, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, an array indexing issue existed in the handling of a function in javascript core. This issue was addressed with improved checks.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

Required

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)2.2% · higher than 83% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

IO

iOS · Apple

before 11.3 · source: NVD

IT

Itunes · Apple

before 12.7.4 · source: NVD

SA

Safari · Apple

before 11.1 · source: NVD

TV

Tvos · Apple

before 11.3 · source: NVD

UL

Ubuntu Linux · Canonical

18.04 · source: NVD

WA

Watchos · Apple

before 4.3 · source: NVD

WE

Webkitgtk+ · Webkitgtk

before 2.22.0 · source: NVD