CVE-2018-4266: A race condition was addressed with additional validation

Description

A race condition was addressed with additional validation. This issue affected versions prior toiVersions prior to: OS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack vector

Network

Complexity

High

Privileges

None

User interaction

None

Confidentiality

None

Integrity

None

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)1.8% · higher than 78% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

IO

iOS · Apple

before 11.4.1 · source: NVD

IC

Icloud · Apple

before 7.6 · source: NVD

IT

Itunes · Apple

before 12.8 · source: NVD

SA

Safari · Apple

before 11.1.2 · source: NVD

TV

Tvos · Apple

before 11.4.1 · source: NVD

WA

Watchos · Apple

before 4.3.2 · source: NVD