CVE-2018-4433

MEDIUM

iPhone OS < 12.0 - Unauthorized File System Modification

Title source: llm

Description

A configuration issue was addressed with additional restrictions. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra, watchOS 5, iOS 12, tvOS 12, macOS Mojave 10.14. A malicious application may be able to modify protected parts of the file system.

References (5)

Core 5

Core References

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT209139

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT209106

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT209107

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT209108

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT209600

Scores

CVSS v3 5.5

EPSS 0.0075

EPSS Percentile 51.0%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Details

Status published

Products (4)

apple/iphone_os < 12.0

apple/mac_os_x < 10.14.4

apple/tvos < 12.0

apple/watchos < 5.0

Published Oct 27, 2020

Tracked Since Feb 18, 2026