7.5

CVE-2018-4474

A memory consumption issue was addressed with improved memory handling. This issue is fixed in iCloud for Windows 7.7, watchOS 5, Safari 12, iOS 12, iTunes 12.9 for Windows, tvOS 12. Unexpected interaction causes an ASSERT failure.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
AppleiCloud SwPlatformwindows Version < 7.7
AppleiTunes SwPlatformwindows Version < 12.9
AppleSafari Version < 12
AppleiPhone OS Version < 12.0
AppletvOS Version < 12
ApplewatchOS Version < 5.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.69% 0.74
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

https://support.apple.com/en-us/HT209106
Vendor Advisory
https://support.apple.com/en-us/HT209107
Vendor Advisory
https://support.apple.com/en-us/HT209108
Vendor Advisory
https://support.apple.com/en-us/HT209109
Vendor Advisory
https://support.apple.com/en-us/HT209140
Vendor Advisory
https://support.apple.com/en-us/HT209141
Vendor Advisory