CVE-2018-4131

🗓️ 03 Apr 2018 06:29:05Reported by [email protected]Type

An issue in Apple iOS and macOS versions before 11.3 and 10.13.4 respectively allows attackers to bypass Secure Input Mode in "WindowServer" component, leading to keystroke logging via a crafted app

Reporter	Title	Published	Views	Family All 16
Tenable Nessus	macOS 10.13.x < 10.13.4 Multiple Vulnerabilities	10 Apr 201900:00	–	nessus
Tenable Nessus	Apple iOS < 11.3 Multiple Vulnerabilities	17 Apr 201900:00	–	nessus
Tenable Nessus	Apple iOS < 11.3 Multiple Vulnerabilities	3 Apr 201800:00	–	nessus
Tenable Nessus	macOS and Mac OS X Multiple Vulnerabilities (Security Update 2018-002)	2 Apr 201800:00	–	nessus
Tenable Nessus	macOS 10.13.x < 10.13.4 Multiple Vulnerabilities	2 Apr 201800:00	–	nessus
Apple	About the security content of iOS 11.3	29 Mar 201800:00	–	apple
Apple	About the security content of macOS High Sierra 10.13.4, Security Update 2018-002 Sierra, and Security Update 2018-002 El Capitan	29 Mar 201800:00	–	apple
Apple	About the security content of macOS High Sierra 10.13.4, Security Update 2018-002 Sierra, and Security Update 2018-002 El Capitan - Apple Support	15 May 201909:12	–	apple
Apple	About the security content of iOS 11.3 - Apple Support	27 Jul 202008:17	–	apple
CNVD	Apple iOS and macOS High Sierra WindowServer Security Bypass Vulnerability	24 Apr 201800:00	–	cnvd

NVD

Node

apple iphone_osRange<11.3

apple mac_os_xRange<10.13.4

Source	Link
securitytracker	www.securitytracker.com/id/1040608
securityfocus	www.securityfocus.com/bid/103581
twitter	www.twitter.com/boastr_net/status/979624397664333824
support	www.support.apple.com/HT208693
securitytracker	www.securitytracker.com/id/1040604
support	www.support.apple.com/HT208692

21 Nov 2024 04:06Current

6.2Medium risk

Vulners AI Score6.2

CVSS 24.3

CVSS 37.8

EPSS0.00224