VULNERABILITY INTELLIGENCE

CVE-2018-4277

CVSS score7.5 HIGH
EPSS probability1.87%
CISA KEVNot currently listed
Published2019-01-11
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Description

In iOS before 11.4.1, watchOS before 4.3.2, tvOS before 11.4.1, Safari before 11.1.1, macOS High Sierra before 10.13.6, a spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references