Home > Vulnerability Database > CVE-2018-4306

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2018-4306

Date: April 3, 2019

A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

Severity Score

8.8

Related Resources (7)

Url: https://nvd.nist.gov/vuln/detail/CVE-2018-4306

Url: https://support.apple.com/kb/HT209106

Url: https://support.apple.com/kb/HT209107

Url: https://support.apple.com/kb/HT209109

Url: https://support.apple.com/kb/HT209140

Url: https://support.apple.com/kb/HT209141

Url: https://www.mend.io/vulnerability-database/CVE-2018-4306

Severity Score

8.8

Weakness Type (CWE)

Use After Free

CWE-416

CVSS v3.1

Base Score:	8.8
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	REQUIRED
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

CVSS v2

Base Score:	6.8
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Do you need more information?

Contact Us