CVE-2018-4360

8.8 highEPSS 2.2%

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2019-04-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apple:icloud
apple:iphone_os
apple:itunes
apple:safari
apple:tvos

References

https://devcraft.io/2019/02/19/cve-2018-4360-webkit-information-leakage-with-dommatrixinvertself.html
https://github.com/WebKit/webkit/commit/a0b0e01648892b0bb60a01aca619eec85eb27f7a
https://support.apple.com/kb/HT209106
https://support.apple.com/kb/HT209107
https://support.apple.com/kb/HT209109

Check your stack JSON