Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.5

A logic issue was addressed with improved state management. This issue is fixed in Safari 12.0.2, iOS 12.1.1, tvOS 12.1.1, iTunes 12.9.2 for Windows. Processing maliciously crafted web content may ...

CVE-2018-4444 · published 6 years ago
Summary

A logic issue was addressed with improved state management. This issue is fixed in Safari 12.0.2, iOS 12.1.1, tvOS 12.1.1, iTunes 12.9.2 for Windows. Processing maliciously crafted web content may disclose sensitive user information.

What to do
  • Update apple itunes to version 12.9.2 or later.
  • Update apple safari to version 12.0.2 or later.
  • Update apple iphone_os to version 12.1.1 or later.
  • Update apple tvos to version 12.1.1 or later.
Affected software
VendorProductAffected versions
apple itunes < 12.9.2
cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*
apple safari < 12.0.2
cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
apple iphone_os < 12.1.1
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
apple tvos < 12.1.1
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
Original advisory text
A logic issue was addressed with improved state management. This issue is fixed in Safari 12.0.2, iOS 12.1.1, tvOS 12.1.1, iTunes 12.9.2 for Windows. Processing maliciously crafted web content may ...
A logic issue was addressed with improved state management. This issue is fixed in Safari 12.0.2, iOS 12.1.1, tvOS 12.1.1, iTunes 12.9.2 for Windows. Processing maliciously crafted web content may disclose sensitive user information.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
6.5 Medium
Exploitation
1% chance of attack within 30 days
Timeline
Published27 Oct 2020
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2018-4444 · NVD
Track software like this
Free during beta