CVE-2018-4149

CVE-2018-4149 affects the SafariViewController component in iOS prior to 11.3. The issue is a state-management flaw that could allow a malicious website to spoof UI by exploiting input during page load, enabling UI spoofing when a partially loaded page is presented in SafariViewController. Apple’...