CVE-2018-4243: apple apple_tv

EPSS trend

Probability

18.19%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

-0.35 pp

From 18.54% on 18-09-2026

18-09-202618-10-2026

EPSS score

18.19%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (bugs.chromium.org)
Maturity: unknown
exploit-databasedosmultipleVerified
Apple macOS/iOS Kernel - Heap Overflow Due to Lack of Lower Size Check in getvolattrlist
Maturity: poc

References

7 links

support.apple.com/HT208850X Refsource CONFIRMVendor Advisory
www.exploit-db.com/exploits/44848/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
support.apple.com/HT208851X Refsource CONFIRMVendor Advisory
www.securitytracker.com/id/1041027VDB EntryX Refsource SECTRACKThird Party Advisory
bugs.chromium.org/p/project-zero/issues/detail?id=1564X Refsource MISCExploitIssue TrackingThird Party Advisory
support.apple.com/HT208848X Refsource CONFIRMVendor Advisory
support.apple.com/HT208849X Refsource CONFIRMVendor Advisory

Related vulnerabilities

CVE-2018-20505appleicloud+76.89%7y ago03-04-2019 17:51SQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remote attackers to cause a denial of service (application crash) by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases).CVE-2018-4121appleicloud+1013.10%8y ago03-04-2018 06:00An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.CVE-2018-4090appleapple_tv+33.62%8y ago03-04-2018 06:00An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.CVE-2018-4467applemac_os_x+10.78%5y ago27-10-2020 19:21A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.3, Security Update 2019-001 High Sierra, Security Update 2019-001 Sierra, macOS Mojave 10.14.2, Security Update 2018-003 High Sierra, Security Update 2018-006 Sierra. A malicious application may be able to elevate privileges.CVE-2018-4391appleiphone_os+30.87%5y ago27-10-2020 19:19An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan, watchOS 4.3, iOS 12.1. Processing a maliciously crafted text message may lead to UI spoofing.CVE-2018-4236applemac_os_x1.18%8y ago08-06-2018 18:00An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "IOGraphics" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

All vulnerabilities inapple_tv iphone_os mac_os_x watchos

CVE-2018-4243: apple apple_tv

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References