{
    "id": "CVE-2018-4386",
    "published": "2019-04-03 18:29:12",
    "last_modified": "2026-06-17 01:58:53",
    "cvss_score": "8.8",
    "cvss_severity": "HIGH",
    "cvss_version": "3.0",
    "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
    "cwe": "CWE-119",
    "description": "Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.",
    "epss_score": "0.06487",
    "epss_percentile": "0.93559",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-10-05 18:17:18",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "apple",
            "product": "icloud"
        },
        {
            "vendor": "apple",
            "product": "iphone_os"
        },
        {
            "vendor": "apple",
            "product": "itunes"
        },
        {
            "vendor": "apple",
            "product": "safari"
        },
        {
            "vendor": "apple",
            "product": "tvos"
        },
        {
            "vendor": "apple",
            "product": "watchos"
        },
        {
            "vendor": "microsoft",
            "product": "windows"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "47893",
            "title": "Sony Playstation 4 (PS4) < 6.72 - WebKit Code Execution (PoC)",
            "date": "2019-12-31",
            "url": "https://www.exploit-db.com/exploits/47893"
        },
        {
            "source": "exploit-db",
            "ref_id": "45912",
            "title": "WebKit JSC - BytecodeGenerator::hoistSloppyModeFunctionIfNecessary Does not Invalidate the 'ForInContext' Object",
            "date": "2018-11-29",
            "url": "https://www.exploit-db.com/exploits/45912"
        }
    ],
    "refs_list": [
        "http://packetstormsecurity.com/files/155871/Sony-Playstation-4-Webkit-Code-Execution.html",
        "https://support.apple.com/kb/HT209192",
        "https://support.apple.com/kb/HT209194",
        "https://support.apple.com/kb/HT209195",
        "https://support.apple.com/kb/HT209196",
        "https://support.apple.com/kb/HT209197",
        "https://support.apple.com/kb/HT209198",
        "http://packetstormsecurity.com/files/155871/Sony-Playstation-4-Webkit-Code-Execution.html",
        "https://support.apple.com/kb/HT209192",
        "https://support.apple.com/kb/HT209194",
        "https://support.apple.com/kb/HT209195",
        "https://support.apple.com/kb/HT209196",
        "https://support.apple.com/kb/HT209197",
        "https://support.apple.com/kb/HT209198"
    ]
}