8.8

CVE-2018-4210

In iOS before 11.3, Safari before 11.1, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, an array indexing issue existed in the handling of a function in javascript core. This issue was addressed with improved checks.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ Safari Version < 11.1
Apple ≫ iPhone OS Version < 11.3
Apple ≫ tvOS Version < 11.3
Apple ≫ watchOS Version < 4.3
Apple ≫ iTunes Version < 12.7.4
   Microsoft ≫ Windows
Canonical ≫ Ubuntu Linux Version18.04 SwEditionlts
Webkitgtk ≫ Webkitgtk+ Version < 2.22.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.89% 0.749
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-129 Improper Validation of Array Index

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

https://usn.ubuntu.com/3781-1/
Third Party Advisory