Local User Vulnerability in Apple iOS, macOS, and Other Products
CVE-2018-4224

5.5MEDIUM

Key Information:

Vendor
Apple
Status
Mac Os X
iPhone OS
Apple Tv
Watch OS
Vendor
CVE Published:
8 June 2018

Summary

A significant vulnerability has been identified in various Apple products, including iOS, macOS, iCloud, iTunes, tvOS, and watchOS, prior to specific versions. This issue enables local users to circumvent intended restrictions, granting unauthorized access to read a persistent device identifier. This may lead to further privacy concerns and the unauthorized extraction of sensitive information. Users are advised to update their devices promptly to mitigate the risks associated with this security flaw.

References

https://support.apple.com/HT208850
x_refsource_CONFIRM
https://support.apple.com/HT208853
x_refsource_CONFIRM
https://support.apple.com/HT208851
x_refsource_CONFIRM

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.