CVE-2018-4311

HIGH

Safari < 12 - Exposure of Sensitive Information via Origin Information

Title source: llm

Description

The issue was addressed by removing origin information. This issue affected versions prior to iOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

References (5)

Core 5

Core References

Vendor Advisory x_refsource_misc

https://support.apple.com/kb/HT209141

Vendor Advisory x_refsource_misc

https://support.apple.com/kb/HT209140

Vendor Advisory x_refsource_misc

https://support.apple.com/kb/HT209106

Vendor Advisory x_refsource_misc

https://support.apple.com/kb/HT209108

Vendor Advisory x_refsource_misc

https://support.apple.com/kb/HT209109

Scores

CVSS v3 8.1

EPSS 0.0206

EPSS Percentile 79.0%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Details

CWE

CWE-200

Status published

Products (5)

apple/icloud < 7.7

apple/iphone_os < 12.0

apple/itunes < 12.9

apple/safari < 12

apple/watchos < 5.0

Published Apr 03, 2019

Tracked Since Feb 18, 2026