CVE-2018-4269

HIGH 8.6CVE-2018-4269 · Published 03/04/2019 · updated 17/06/2026

In short

CVE-2018-4269 is a HIGH (CVSS 8.6) vulnerability affecting icloud (apple), itunes (apple), safari (apple).
Chance of exploitation in the next 30 days (EPSS): 0.97%, higher than 62.0% of all vulnerabilities.
Fix: update to 7.6, 12.8, 11.1.2 or later.

Package	Affected versions	Patched versions
icloud apple	`< 7.6`	`7.6`
itunes apple	`< 12.8`	`12.8`
safari apple	`< 11.1.2`	`11.1.2`

Description

A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.

References

support.apple.com/kb/HT208932 · Vendor Advisory
support.apple.com/kb/HT208935 · Vendor Advisory
support.apple.com/kb/HT208936 · Vendor Advisory
support.apple.com/kb/HT208937 · Vendor Advisory

More vulnerabilities in icloud

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

icloud

apple

< 7.6

7.6

itunes

apple

< 12.8

12.8

safari

apple

< 11.1.2

11.1.2

More vulnerabilities in icloud

See all →