VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Apr 3, 2019· Updated Jun 17, 2026

CVE-2018-4377

CVE-2018-4377

Description

A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affected versions prior to iOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Apple Inc./iCloud
    cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*
    Range: <7.8
  • Apple Inc./iTunes2 versions
    cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*range: <12.9.1
    • (no CPE)range: <12.9.1
  • Apple Inc./Safari2 versions
    cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*range: <12.0.1
    • (no CPE)range: <12.0.1
  • Apple Inc./Iphone OS
    cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
    Range: <12.1
  • Apple Inc./watchOS
    cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
    Range: <5.1
  • Apple Inc./iOSllm-fuzzy
    Range: <12.1

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.