CVE-2018-4416

HIGH

Apple Safari < 12.0.1 - Memory Corruption

Title source: rule

Description

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.

Exploits (2)

exploitdb WORKING POC VERIFIED
by Google Security Research · javascriptdosmultiple
https://www.exploit-db.com/exploits/45910
nomisec WORKING POC 8 stars
by erupmi · poc
https://github.com/erupmi/CVE-2018-4416-exploit

References (6)

Scores

CVSS v3 8.8
EPSS 0.4115
EPSS Percentile 97.4%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-119
Status published
Products (6)
apple/icloud < 7.8
apple/iphone_os < 12.1
apple/itunes < 12.9.1
apple/safari < 12.0.1
apple/tvos < 12.1
apple/watchos < 5.1
Published Apr 03, 2019
Tracked Since Feb 18, 2026