VULNERABILITY INTELLIGENCE

CVE-2018-4319

CVSS score8.1 HIGH
EPSS probability1.07%
CISA KEVNot currently listed
Published2019-04-03
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Description

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue affected versions prior to iOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

Weakness classification

  • CWE-346: Origin Validation Error

Primary references