CVE-2018-4315

HIGH

Safari < 12 - Use-After-Free

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2018-4315. PoCs published by Google Security Research.

AI-analyzed exploit summary This is a working proof-of-concept exploit for a use-after-free vulnerability in WebKit (CVE-2018-4315). The PoC triggers the vulnerability by manipulating SVG elements and executing specific JavaScript functions to cause a heap-use-after-free condition.

Description

A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Google Security Research · htmldosmultiple

https://www.exploit-db.com/exploits/45485

View Code ZIP pw:eip

This is a working proof-of-concept exploit for a use-after-free vulnerability in WebKit (CVE-2018-4315). The PoC triggers the vulnerability by manipulating SVG elements and executing specific JavaScript functions to cause a heap-use-after-free condition.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: WebKit revision 233006 on OSX

No auth needed

Prerequisites: A vulnerable version of WebKit · Ability to execute JavaScript in the target environment

MITRE ATT&CK

T1068 - Exploitation for Privilege Escalation

devstral-2 · analyzed Feb 16, 2026 Full analysis →