CVE-2018-4278 — Apple Icloud vulnerability

11 documents7 sources
Severity
4.3MEDIUMNVD
EPSS
0.7%
top 29.07%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Apple IcloudApple Iphone OSApple Itunes+3 more
Timeline
PublishedJan 11
Latest updateMay 13

Description

In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, sound fetched through audio elements may be exfiltrated cross-origin. This issue was addressed with improved audio taint tracking.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages5 packages

▶NVDapple/tvos< 11.4.1
▶NVDapple/icloud< 7.6
▶NVDapple/itunes< 12.8
▶NVDapple/safari< 11.1.2
▶NVDapple/iphone_os< 11.4.1

Also affects: Ubuntu Linux 16.04, 18.04

🔴Vulnerability Details

3
GHSA
GHSA-9fpc-gm44-7x7q: In Safari before 11↗2022-05-13
▶
CVEList
CVE-2018-4278: In Safari before 11↗2019-01-11
▶
OSV
CVE-2018-4278: In Safari before 11↗2019-01-11
▶

📋Vendor Advisories

7
Ubuntu
WebKitGTK+ vulnerabilities↗2018-08-16
▶
Apple
CVE-2018-4278: iOS 11.4.1↗2018-07-09
▶
Apple
CVE-2018-4278: iTunes 12.8 for Windows↗2018-07-09
▶
Apple
CVE-2018-4278: tvOS 11.4.1↗2018-07-09
▶
Apple
CVE-2018-4278: iCloud for Windows 7.6↗2018-07-09
▶
CVE-2018-4278 — Apple Icloud vulnerability | cvebase