CVE-2018-4107 - An issue was discovered in certain Apple products

Back Back to CVE browser

MEDIUM

An issue was discovered in certain Apple products

Published Apr 3, 2018

6.5

MEDIUM

CVSS 3.0

EPSS 2.00%

Description

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "PDFKit" component. It allows remote attackers to bypass intended restrictions on visiting URLs within a PDF document.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (3)

http://www.securityfocus.com/bid/103582
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1040608
vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://support.apple.com/HT208692
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/103582		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1040608		vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://support.apple.com/HT208692		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner apple

Published Apr 3, 2018

Updated Aug 5, 2024

Reserved Jan 2, 2018

Link CVE-2018-4107

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-4107

Red Hat

Severity n/a

Public date n/a

Links CVE-2018-4107