CVE-2018-4237: apple iphone_os

EPSS trend

Probability

13.48%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

Decrease -0.27 pp

From 13.75% on 22-09-2026

22-09-202622-10-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

2 found

exploit-databaselocalmacosVerified
Mac OS X - libxpc MITM Privilege Escalation (Metasploit)
Maturity: weaponized
MetasploitremoteVerified
Mac OS X libxpc MITM Privilege Escalation
exploit/osx/local/libxpc_mitm_ssudo
Maturity: weaponized

References

6 links

support.apple.com/HT208850X Refsource CONFIRMVendor Advisory
support.apple.com/HT208851X Refsource CONFIRMVendor Advisory
www.securitytracker.com/id/1041027VDB EntryX Refsource SECTRACKThird Party Advisory
support.apple.com/HT208848X Refsource CONFIRMVendor Advisory
support.apple.com/HT208849X Refsource CONFIRMVendor Advisory
www.exploit-db.com/exploits/45916/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry

Related vulnerabilities

HighCVE-2018-20505apple · icloud +7 more7y agoapple icloudSQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remote attackers to cause a denial of service (application crash) by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases).EPSS6.89%HighCVE-2018-4121apple · icloud +10 more8y agoapple icloudAn issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.EPSS13.10%MediumCVE-2018-4090apple · apple_tv +3 more8y agoapple apple_tvAn issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.EPSS3.62%HighCVE-2018-4467apple · mac_os_x +1 more5y agoapple mac_os_xA memory corruption issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.3, Security Update 2019-001 High Sierra, Security Update 2019-001 Sierra, macOS Mojave 10.14.2, Security Update 2018-003 High Sierra, Security Update 2018-006 Sierra. A malicious application may be able to elevate privileges.EPSS0.78%MediumCVE-2018-4391apple · iphone_os +3 more5y agoapple iphone_osAn inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan, watchOS 4.3, iOS 12.1. Processing a maliciously crafted text message may lead to UI spoofing.EPSS0.87%CriticalCVE-2018-4236apple · mac_os_x8y agoapple mac_os_xAn issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "IOGraphics" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.EPSS1.18%

All vulnerabilities iniphone_os mac_os_x tvos watchos

CVE-2018-4237: apple iphone_os

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References