Apple Multiple Products Memory Corruption Vulnerability

ÉLEVÉE 7.8EXPLOITED (CISA KEV)CVE-2018-4344 · Published 03/04/2019 · updated 17/06/2026

Apple Multiple Products Memory Corruption Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 27/06/2022. Patch affected systems as an emergency.

En bref

CVE-2018-4344 est une vulnérabilité ÉLEVÉE (CVSS 7.8).
Exploitée activement : la CISA l'a ajoutée au catalogue KEV le 27/06/2022.
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 2.4%, plus élevée que 83.9% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
Multiple Products Apple	Versions not published yet (product named by CISA KEV)

Description

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

References

support.apple.com/kb/HT209106 · Release Notes
support.apple.com/kb/HT209107 · Release Notes
support.apple.com/kb/HT209108 · Release Notes
support.apple.com/kb/HT209139 · Release Notes
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2018-4344

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free