cbcvebase.
CVE-2018-4162
published 2018-04-03

CVE-2018-4162: An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected…

PriorityP270high8.8CVSS 3.0
AVNACLPRNUIRSUCHIHAH
EXPLOIT
EPSS
38.60%
98.4th percentile
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Affected

16 ranges
VendorProductVersion rangeFixed in
appleicloud< 7.47.4
appleicloud_for_windows
appleios
appleiphone_os< 11.311.3
appleitunes< 12.7.412.7.4
appleitunes_12.7.4_for_windows
applesafari< 11.111.1
applesafari
appletvos< 11.311.3
appletvos
applewatchos< 4.34.3
applewatchos
canonicalubuntu_linux
canonicalubuntu_linux
debianwebkit2gtk< webkit2gtk 2.20.0-2 (bookworm)webkit2gtk 2.20.0-2 (bookworm)
webkitgtkwebkitgtk< 2.20.42.20.4

Detection & IOCsextracted from sources · hover to see the quote

  • Vulnerability is triggered by processing maliciously crafted web content via the WebKit component; monitor for suspicious web content delivery targeting Safari/WebKit-based browsers on Apple platforms
  • Impact is arbitrary code execution via memory corruption in WebKit; focus detection on WebKit process crashes or unexpected memory corruption signals in Safari, iTunes, iCloud, tvOS, and watchOS WebKit components
  • Multiple memory corruption issues are the root cause; correlate application crashes in WebKit-consuming processes (Safari, iTunes for Windows, iCloud for Windows) with inbound web content as a detection signal
  • ·Doc 2 references a different CVE (CVE-2016-4669) and targets iOS 7.1.2 — this Metasploit module is NOT for CVE-2018-4162 and should not be used as a detection or exploitation reference for this CVE
  • ·Affected version scope is broad: iOS < 11.3, Safari < 11.1, iCloud for Windows < 7.4, iTunes for Windows < 12.7.4, tvOS < 11.3, watchOS < 4.3 — ensure asset inventory covers all these platforms when scoping detection

CVSS provenance

nvdv3.08.8HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
osv8.8HIGH
vendor_debian8.8LOW
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.