CVE-2018-4409

6.5 mediumEPSS 1.6%

A resource exhaustion issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1, tvOS 12.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.

Severity

CVSS 3.0

6.5 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
CWE: CWE-400
Published: 2019-04-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apple:icloud
apple:iphone_os
apple:itunes
apple:safari
apple:tvos

References

https://support.apple.com/kb/HT209192
https://support.apple.com/kb/HT209194
https://support.apple.com/kb/HT209196
https://support.apple.com/kb/HT209197
https://support.apple.com/kb/HT209198

Check your stack JSON