CVE-2018-4188

6.5MEDIUM

Key Information:

Vendor
Apple
Status
iPhone OS
Safari
Apple Tv
Vendor
CVE Published:
8 June 2018

Summary

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to spoof the address bar via a crafted web site.

References

https://support.apple.com/HT208850
x_refsource_CONFIRM
https://support.apple.com/HT208853
x_refsource_CONFIRM
https://support.apple.com/HT208854
x_refsource_CONFIRM

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.