CVE-2018-4361

HIGH

Safari < 12 - Denial of Service via Memory Consumption

Title source: llm

Description

A memory consumption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

References (6)

Core 6

Core References

Vendor Advisory x_refsource_misc

https://support.apple.com/HT209106

Vendor Advisory x_refsource_misc

https://support.apple.com/HT209107

Vendor Advisory x_refsource_misc

https://support.apple.com/HT209108

Vendor Advisory x_refsource_misc

https://support.apple.com/HT209109

Vendor Advisory x_refsource_misc

https://support.apple.com/HT209140

Vendor Advisory x_refsource_misc

https://support.apple.com/HT209141

Scores

CVSS v3 8.8

EPSS 0.0217

EPSS Percentile 80.4%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

Status published

Products (6)

apple/icloud < 7.7

apple/iphone_os < 12.0

apple/itunes < 12.9

apple/safari < 12

apple/tvos < 12

apple/watchos < 5.0

Published Apr 03, 2019

Tracked Since Feb 18, 2026