CVE-2018-4433
published 2020-10-27CVE-2018-4433: A configuration issue was addressed with additional restrictions. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security…
PriorityP422medium5.5CVSS 3.1
AVLACLPRNUIRSUCNIHAN
EPSS
0.75%
51.1th percentile
A configuration issue was addressed with additional restrictions. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra, watchOS 5, iOS 12, tvOS 12, macOS Mojave 10.14. A malicious application may be able to modify protected parts of the file system.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios | — | — |
| apple | ios | >= unspecified < 12 | 12 |
| apple | iphone_os | < 12.0 | 12.0 |
| apple | mac_os_x | < 10.14.4 | 10.14.4 |
| apple | mac_os_x | < 10.14 | 10.14 |
| apple | macos | >= unspecified < 10.14 | 10.14 |
| apple | macos_mojave | — | — |
| apple | macos_mojave_10.14.4_security_update_2019-002_high_sierra_security_update_2019-0 | — | — |
| apple | tvos | < 12.0 | 12.0 |
| apple | tvos | — | — |
| apple | tvos | >= unspecified < 12 | 12 |
| apple | watchos | < 5.0 | 5.0 |
| apple | watchos | >= unspecified < 5 | 5 |
| apple | watchos_5 | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Apple
CVE-2018-4433: macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra
vendor_apple·2019-03-25·CVSS 5.5
CVE-2018-4433 [MEDIUM] CVE-2018-4433: macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra
Apple Security Update: About the security content of macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra
Product: macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra
CVE: CVE-2018-4433
Component: Kernel
Impact: An application may be able to execute arbitrary code with kernel privileges
Description: A memory corruption issue was addressed with improved state management.
Apple
CVE-2018-4433: macOS Mojave 10.14
vendor_apple·2018-09-24·CVSS 5.5
CVE-2018-4433 [MEDIUM] CVE-2018-4433: macOS Mojave 10.14
Apple Security Update: About the security content of macOS Mojave 10.14
Product: macOS Mojave
Version: 10.14
CVE: CVE-2018-4433
Component: DiskArbitration
Impact: A malicious application may be able to modify contents of the EFI system partition and execute arbitrary code with kernel privileges if secure boot is not enabled
Description: A permissions issue existed in DiskArbitration. This was addressed with additional ownership checks.
Apple
CVE-2018-4433: iOS 12
vendor_apple·2018-09-17·CVSS 5.5
CVE-2018-4433 [MEDIUM] CVE-2018-4433: iOS 12
Apple Security Update: About the security content of iOS 12
Product: iOS
Version: 12
CVE: CVE-2018-4433
Component: Crash Reporter
Impact: An application may be able to read restricted memory
Description: A validation issue was addressed with improved input sanitization.
Apple
CVE-2018-4433: tvOS 12
vendor_apple·2018-09-17·CVSS 5.5
CVE-2018-4433 [MEDIUM] CVE-2018-4433: tvOS 12
Apple Security Update: About the security content of tvOS 12
Product: tvOS
Version: 12
CVE: CVE-2018-4433
Component: CoreText
Impact: Processing a maliciously crafted text file may lead to arbitrary code execution
Description: A use after free issue was addressed with improved memory management.
Apple
CVE-2018-4433: watchOS 5
vendor_apple·2018-09-17·CVSS 5.5
CVE-2018-4433 [MEDIUM] CVE-2018-4433: watchOS 5
Apple Security Update: About the security content of watchOS 5
Product: watchOS 5
CVE: CVE-2018-4433
Component: CoreText
Impact: Processing a maliciously crafted text file may lead to arbitrary code execution
Description: A use after free issue was addressed with improved memory management.
GHSA
GHSA-vwv4-wj3m-3cqg: A configuration issue was addressed with additional restrictions
ghsa_unreviewed·2022-05-24
CVE-2018-4433 [MEDIUM] GHSA-vwv4-wj3m-3cqg: A configuration issue was addressed with additional restrictions
A configuration issue was addressed with additional restrictions. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra, watchOS 5, iOS 12, tvOS 12, macOS Mojave 10.14. A malicious application may be able to modify protected parts of the file system.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://support.apple.com/en-us/HT209106https://support.apple.com/en-us/HT209107https://support.apple.com/en-us/HT209108https://support.apple.com/en-us/HT209139https://support.apple.com/en-us/HT209600https://support.apple.com/en-us/HT209106https://support.apple.com/en-us/HT209107https://support.apple.com/en-us/HT209108https://support.apple.com/en-us/HT209139https://support.apple.com/en-us/HT209600
2020-10-27
Published