CVE-2018-4444

MEDIO 6.5CVE-2018-4444 · Published 27/10/2020 · updated 17/06/2026

In breve

CVE-2018-4444 è una vulnerabilità MEDIO (CVSS 6.5) che riguarda itunes (apple), safari (apple).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.1%, superiore al 66.1% delle vulnerabilità.
Correzione: aggiornare a 12.9.2, 12.0.2 o successiva.

Package	Affected versions	Patched versions
itunes apple	`< 12.9.2`	`12.9.2`
safari apple	`< 12.0.2`	`12.0.2`

Description

A logic issue was addressed with improved state management. This issue is fixed in Safari 12.0.2, iOS 12.1.1, tvOS 12.1.1, iTunes 12.9.2 for Windows. Processing maliciously crafted web content may disclose sensitive user information.

References

support.apple.com/en-us/HT209340 · Vendor Advisory
support.apple.com/en-us/HT209342 · Vendor Advisory
support.apple.com/en-us/HT209344 · Vendor Advisory
support.apple.com/en-us/HT209345 · Vendor Advisory

Altre vulnerabilità di itunes

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

itunes

apple

< 12.9.2

12.9.2

safari

apple

< 12.0.2

12.0.2

Altre vulnerabilità di itunes

Vedi tutto →