6.5

CVE-2018-4444

A logic issue was addressed with improved state management. This issue is fixed in Safari 12.0.2, iOS 12.1.1, tvOS 12.1.1, iTunes 12.9.2 for Windows. Processing maliciously crafted web content may disclose sensitive user information.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ iTunes SwPlatform windows Version < 12.9.2
Apple ≫ Safari Version < 12.0.2
Apple ≫ iPhone OS Version < 12.1.1
Apple ≫ tvOS Version < 12.1.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.12% 0.627
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://support.apple.com/en-us/HT209340
Vendor Advisory
https://support.apple.com/en-us/HT209342
Vendor Advisory
https://support.apple.com/en-us/HT209344
Vendor Advisory
https://support.apple.com/en-us/HT209345
Vendor Advisory