CVE-2018-4274
published 2019-04-03CVE-2018-4274: A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1…
PriorityP335high7.5CVSS 3.0
AVNACLPRNUINSUCNIHAN
EPSS
0.21%
43.5th percentile
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, Safari 11.1.2.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios | — | — |
| apple | iphone_os | < 11.4.1 | 11.4.1 |
| apple | macos_high_sierra_10.13.6_security_update_2018-004_sierra_security_update_2018-0 | — | — |
| apple | safari | < 11.1.2 | 11.1.2 |
| apple | safari | — | — |
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
GHSA
GHSA-r6g6-436h-6x63: A spoofing issue existed in the handling of URLs
ghsa_unreviewed·2022-05-14
CVE-2018-4274 [HIGH] CWE-20 GHSA-r6g6-436h-6x63: A spoofing issue existed in the handling of URLs
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, Safari 11.1.2.
Apple
CVE-2018-4274: Safari 11.1.2
vendor_apple·2018-07-09·CVSS 7.5
CVE-2018-4274 [HIGH] CVE-2018-4274: Safari 11.1.2
Apple Security Update: About the security content of Safari 11.1.2
Product: Safari
Version: 11.1.2
CVE: CVE-2018-4274
Component: WebKit
Impact: Visiting a malicious website may lead to address bar spoofing
Description: A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation.
Apple
CVE-2018-4274: macOS High Sierra 10.13.6, Security Update 2018-004 Sierra, Security Update 2018-004 El Capitan
vendor_apple·2018-07-09·CVSS 7.5
CVE-2018-4274 [HIGH] CVE-2018-4274: macOS High Sierra 10.13.6, Security Update 2018-004 Sierra, Security Update 2018-004 El Capitan
Apple Security Update: About the security content of macOS High Sierra 10.13.6, Security Update 2018-004 Sierra, Security Update 2018-004 El Capitan
Product: macOS High Sierra 10.13.6, Security Update 2018-004 Sierra, Security Update 2018-004 El Capitan
CVE: CVE-2018-4274
Component: WebKit
Impact: Visiting a malicious website may lead to address bar spoofing
Description: A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation.
Apple
CVE-2018-4274: iOS 11.4.1
vendor_apple·2018-07-09·CVSS 7.5
CVE-2018-4274 [HIGH] CVE-2018-4274: iOS 11.4.1
Apple Security Update: About the security content of iOS 11.4.1
Product: iOS
Version: 11.4.1
CVE: CVE-2018-4274
Component: WebKit
Impact: Visiting a malicious website may lead to address bar spoofing
Description: A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2019-04-03
Published