CVE-2018-4274 — Improper Input Validation in Apple Safari

CWE-20 — Improper Input Validation6 documents4 sources
Severity
7.5HIGHNVD
EPSS
0.2%
top 56.53%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple Iphone OSApple Safari
Timeline
PublishedApr 3
Latest updateMay 14

Description

A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, Safari 11.1.2.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶NVDapple/safari< 11.1.2
▶NVDapple/iphone_os< 11.4.1

🔴Vulnerability Details

2
GHSA
GHSA-r6g6-436h-6x63: A spoofing issue existed in the handling of URLs↗2022-05-14
▶
CVEList
CVE-2018-4274: A spoofing issue existed in the handling of URLs↗2019-04-03
▶

📋Vendor Advisories

3
Apple
CVE-2018-4274: Safari 11.1.2↗2018-07-09
▶
Apple
CVE-2018-4274: macOS High Sierra 10.13.6, Security Update 2018-004 Sierra, Security Update 2018-004 El Capitan↗2018-07-09
▶
Apple
CVE-2018-4274: iOS 11.4.1↗2018-07-09
▶
CVE-2018-4274 — Improper Input Validation in Apple | cvebase