Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2018-4312 — Use After Free in Apple Icloud

CWE-416 — Use After Free14 documents10 sources
Severity
8.8HIGHNVD
EPSS
20.0%
top 4.52%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
5
Apple IcloudApple Iphone OSApple Itunes+2 more
Timeline
PublishedApr 3
Latest updateMay 14

Description

A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages5 packages

▶NVDapple/tvos< 12
▶NVDapple/icloud< 7.7
▶NVDapple/itunes< 12.9
▶NVDapple/safari< 12
▶NVDapple/iphone_os< 12.0

🔴Vulnerability Details

5
GHSA
GHSA-q6fg-h4rh-65xx: A use after free issue was addressed with improved memory management↗2022-05-14
▶
OSV
CVE-2018-4312: A use after free issue was addressed with improved memory management↗2019-04-03
▶
CVEList
CVE-2018-4312: A use after free issue was addressed with improved memory management↗2019-04-03
▶
Project0
365 Days Later: Finding and Exploiting Safari Bugs using Publicly Available Tools - Project Zero↗2018-10-01
▶
VulnCheck
Apple safari Use After Free↗2018
▶

💥Exploits & PoCs

1
Exploit-DB
WebKit - 'WebCore::AXObjectCache::handleMenuItemSelected' Use-After-Free↗2018-09-25
▶

📋Vendor Advisories

7
Apple
CVE-2018-4312: iCloud for Windows 7.7↗2018-10-08
▶
Ubuntu
WebKitGTK+ vulnerabilities↗2018-10-03
▶
Apple
CVE-2018-4312: tvOS 12↗2018-09-17
▶
Apple
CVE-2018-4312: iOS 12↗2018-09-17
▶
Apple
CVE-2018-4312: Safari 12↗2018-09-17
▶
CVE-2018-4312 — Use After Free in Apple Icloud | cvebase